Lucene search

[email protected]CVE-2022-45854

HistoryFeb 07, 2023 - 2:15 a.m.

CVE-2022-45854

2023-02-0702:15:08

CWE-754

[email protected]

web.nvd.nist.gov

cve-2022-45854

zyxel nwa110ax

firmware vulnerability

lan attacker

dos

vlan frames

4.3 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

4.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

An improper check for unusual conditions in Zyxel NWA110AX firmware verisons prior to 6.50(ABTG.0)C0, which could allow a LAN attacker to cause a temporary denial-of-service (DoS) by sending crafted VLAN frames if the MAC address of the vulnerable AP were intercepted by the attacker.

Affected configurations

NVD

Node

zyxelnwa110axMatch-

AND

zyxelnwa110ax_firmwareRange≤6.45\(abtg.0\)c0

Node

zyxelnwa210axMatch-

AND

zyxelnwa210ax_firmwareRange≤6.45\(abtd.0\)c0

Node

zyxelwax510dMatch-

AND

zyxelwax510d_firmwareRange≤6.45\(abtf.0\)c0

Node

zyxelwax610dMatch-

AND

zyxelwax610d_firmwareRange≤6.45\(abte.0\)c0

Node

zyxelwax630sMatch-

AND

zyxelwax630s_firmwareRange≤6.45\(abzd.0\)c0

Node

zyxelwax650sMatch-

AND

zyxelwax650s_firmwareRange≤6.45\(abrm.0\)c0

CPENameOperatorVersion
zyxel:nwa110ax_firmwarezyxel nwa110ax firmwarele6.45\(abtg.0\)c0

CPE	Name	Operator	Version
zyxel:nwa110ax_firmware	zyxel nwa110ax firmware	le	6.45\(abtg.0\)c0

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "NWA110AX firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "< 6.50(ABTG.0)C0"
      }
    ]
  }
]

References

www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-dos-vulnerability-of-aps

4.3 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

4.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for CVE-2022-45854

nvd1 prion1 cvelist1