CVE-2022-43390

🗓️ 11 Jan 2023 00:00:00Reported by ZyxelType

A command injection vulnerability in Zyxel NR7101 firmware

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	Zyxel 5G NR/4G LTE CPE Router Command Injection	6 Mar 202300:00	–	bdu_fstec
Circl	CVE-2022-43390	11 Jan 202307:29	–	circl
CNNVD	Zyxel NR7101: Operating System Command Injection Vulnerability	11 Jan 202300:00	–	cnnvd
Cvelist	CVE-2022-43390	11 Jan 202300:00	–	cvelist
EUVD	EUVD-2022-46429	3 Oct 202520:07	–	euvd
NVD	CVE-2022-43390	11 Jan 202302:15	–	nvd
osv_cve	CVE-2022-43390	11 Jan 202302:15	–	osv_cve
Prion	Command injection	11 Jan 202302:15	–	prion
Positive Technologies	PT-2023-1559 · Zyxel · Zyxel Nr7101	11 Jan 202300:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2022-43390: Improper Neutralization of Special Elements used in an OS Command	11 Jan 202300:00	–	rapid7

NVD

Vulners

Node

AND

zyxel lte7480-m804_firmwareRange<1.00(abra.6)c0

zyxel lte7480-m804Match-

Node

AND

zyxel lte7490-m904_firmwareRange<1.00(abqy.5)c0

zyxel lte7490-m904Match-

Node

AND

zyxel nebula_nr5101_firmwareRange<1.15(accg.3)c0

zyxel nebula_nr5101Match-

Node

AND

zyxel nebula_nr7101_firmwareRange<1.15(accc.3)c0

zyxel nebula_nr7101Match-

Node

AND

zyxel nr5101_firmwareRange<1.00(abvc.6)c0

zyxel nr5101Match-

Node

AND

zyxel nr7101_firmwareRange<1.00(abuv.7)c0

zyxel nr7101Match-

Node

AND

zyxel nr7102_firmwareRange<1.00(abyd.2)c0

zyxel nr7102Match-

Node

AND

zyxel dx3301-t0_firmwareMatch-

zyxel dx3301-t0Match-

Node

AND

zyxel dx4510-b1_firmwareMatch-

zyxel dx4510-b1Match-

Node

AND

zyxel dx5401-b0_firmwareMatch-

zyxel dx5401-b0Match-

Node

AND

zyxel emg3525-t50b_firmwareMatch-

zyxel emg3525-t50bMatch-

Node

AND

zyxel emg5523-t50b_firmwareMatch-

zyxel emg5523-t50bMatch-

Node

AND

zyxel emg5723-t50k_firmwareMatch-

zyxel emg5723-t50kMatch-

Node

AND

zyxel ex3301-t0_firmwareMatch-

zyxel ex3301-t0Match-

Node

AND

zyxel ex3510-b0_firmwareRange<5.17(abup.7)c0

zyxel ex3510-b0Match-

Node

AND

zyxel ex5401-b0_firmwareMatch-

zyxel ex5401-b0Match-

Node

AND

zyxel ex5501-b0_firmwareMatch-

zyxel ex5501-b0Match-

Node

AND

zyxel ex5510-b0_firmwareRange<5.17(abqx.7)c0

zyxel ex5510-b0Match-

Node

AND

zyxel ex5512-t0_firmwareMatch-

zyxel ex5512-t0Match-

Node

AND

zyxel ex5600-t1_firmwareMatch-

zyxel ex5600-t1Match-

Node

AND

zyxel ex5601-t0_firmwareMatch-

zyxel ex5601-t0Match-

Node

AND

zyxel ex5601-t1_firmwareMatch-

zyxel ex5601-t1Match-

Node

AND

zyxel vmg3927-t50k_firmwareMatch-

zyxel vmg3927-t50kMatch-

Node

AND

zyxel vmg4005-b50a_firmwareMatch-

zyxel vmg4005-b50aMatch-

Node

AND

zyxel vmg4005-b60a_firmwareMatch-

zyxel vmg4005-b60aMatch-

Node

AND

zyxel vmg8623-t50b_firmwareMatch-

zyxel vmg8623-t50bMatch-

Node

AND

zyxel vmg8825-t50k_firmwareMatch-

zyxel vmg8825-t50kMatch-

Node

AND

zyxel ax7501-b0_firmwareMatch-

zyxel ax7501-b0Match-

Node

AND

zyxel pm3100-t0_firmwareMatch-

zyxel pm3100-t0Match-

Node

AND

zyxel pm5100-t0_firmwareMatch-

zyxel pm5100-t0Match-

Node

AND

zyxel pm7300-t0_firmwareMatch-

zyxel pm7300-t0Match-

Node

AND

zyxel pm7320-b0_firmwareMatch-

zyxel pm7320-b0Match-

Node

AND

zyxel pmg5317-t20b_firmwareMatch-

zyxel pmg5317-t20bMatch-

Node

AND

zyxel pmg5617-t20b2_firmwareMatch-

zyxel pmg5617-t20b2Match-

Node

AND

zyxel pmg5617ga_firmwareMatch-

zyxel pmg5617gaMatch-

Node

AND

zyxel pmg5622ga_firmwareMatch-

zyxel pmg5622gaMatch-

Node

AND

zyxel wx3100-t0_firmwareMatch-

zyxel wx3100-t0Match-

Node

AND

zyxel wx3401-b0_firmwareMatch-

zyxel wx3401-b0Match-

Node

AND

zyxel wx5600-t0_firmwareMatch-

zyxel wx5600-t0Match-

[
  {
    "vendor": "Zyxel",
    "product": "NR7101 firmware",
    "versions": [
      {
        "version": "< V1.15(ACCC.3)C0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extenders

17 Jun 2026 05:06Current

8.7High risk

Vulners AI Score8.7

CVSS 3.15.4 - 8.8

EPSS0.01114

SSVC

CWE-78