Lucene search
ZyxelCVELIST:CVE-2022-38546HistoryDec 21, 2022 - 12:00 a.m.
CVE-2022-38546
2022-12-2100:00:00
CWE-284
Zyxel
www.cve.org
4
dns
misconfiguration
zyxel nbg7510
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
AI Score
9.6
Confidence
High
EPSS
0.002
Percentile
58.5%
A DNS misconfiguration was found in Zyxel NBG7510 firmware versions prior to V1.00(ABZY.3)C0, which could allow an unauthenticated attacker to access the DNS server when the device is switched to the AP mode.
CNA Affected
[
{
"vendor": "Zyxel",
"product": "NBG7510 firmware",
"versions": [
{
"version": "< V1.00(ABZY.3)C0",
"status": "affected"
}
]
}
]Related
prion
prion
Code injection
2022-12-21 02:15:00
cve
cve
CVE-2022-38546
2022-12-21 02:15:11
nvd
nvd
CVE-2022-38546
2022-12-21 02:15:11
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
AI Score
9.6
Confidence
High
EPSS
0.002
Percentile
58.5%
Related for CVELIST:CVE-2022-38546