CVE-2022-43390

🗓️ 11 Jan 2023 02:15:11Reported by [email protected]Type

Command injection vulnerability in Zyxel NR7101 firmwar

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of Zyxel 5G NR/4G LTE CPE router’s micro-programming software arises from the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows a hacker to execute arbitrary commands.	6 Mar 202300:00	–	bdu_fstec
Circl	CVE-2022-43390	11 Jan 202307:29	–	circl
CNNVD	Zyxel NR7101 操作系统命令注入漏洞	11 Jan 202300:00	–	cnnvd
CVE	CVE-2022-43390	11 Jan 202300:00	–	cve
Cvelist	CVE-2022-43390	11 Jan 202300:00	–	cvelist
EUVD	EUVD-2022-46429	3 Oct 202520:07	–	euvd
OSV	CVE-2022-43390	11 Jan 202302:15	–	osv
Prion	Command injection	11 Jan 202302:15	–	prion
Positive Technologies	PT-2023-1559 · Zyxel · Zyxel Nr7101	11 Jan 202300:00	–	ptsecurity
RedhatCVE	CVE-2022-43390	22 May 202523:51	–	redhatcve

NVD

Node

AND

zyxel lte7480-m804_firmwareRange<1.00(abra.6)c0

zyxel lte7480-m804Match-

Node

AND

zyxel lte7490-m904_firmwareRange<1.00(abqy.5)c0

zyxel lte7490-m904Match-

Node

AND

zyxel nebula_nr5101_firmwareRange<1.15(accg.3)c0

zyxel nebula_nr5101Match-

Node

AND

zyxel nebula_nr7101_firmwareRange<1.15(accc.3)c0

zyxel nebula_nr7101Match-

Node

AND

zyxel nr5101_firmwareRange<1.00(abvc.6)c0

zyxel nr5101Match-

Node

AND

zyxel nr7101_firmwareRange<1.00(abuv.7)c0

zyxel nr7101Match-

Node

AND

zyxel nr7102_firmwareRange<1.00(abyd.2)c0

zyxel nr7102Match-

Node

AND

zyxel dx3301-t0_firmwareMatch-

zyxel dx3301-t0Match-

Node

AND

zyxel dx4510-b1_firmwareMatch-

zyxel dx4510-b1Match-

Node

AND

zyxel dx5401-b0_firmwareMatch-

zyxel dx5401-b0Match-

Node

AND

zyxel emg3525-t50b_firmwareMatch-

zyxel emg3525-t50bMatch-

Node

AND

zyxel emg5523-t50b_firmwareMatch-

zyxel emg5523-t50bMatch-

Node

AND

zyxel emg5723-t50k_firmwareMatch-

zyxel emg5723-t50kMatch-

Node

AND

zyxel ex3301-t0_firmwareMatch-

zyxel ex3301-t0Match-

Node

AND

zyxel ex3510-b0_firmwareRange<5.17(abup.7)c0

zyxel ex3510-b0Match-

Node

AND

zyxel ex5401-b0_firmwareMatch-

zyxel ex5401-b0Match-

Node

AND

zyxel ex5501-b0_firmwareMatch-

zyxel ex5501-b0Match-

Node

AND

zyxel ex5510-b0_firmwareRange<5.17(abqx.7)c0

zyxel ex5510-b0Match-

Node

AND

zyxel ex5512-t0_firmwareMatch-

zyxel ex5512-t0Match-

Node

AND

zyxel ex5600-t1_firmwareMatch-

zyxel ex5600-t1Match-

Node

AND

zyxel ex5601-t0_firmwareMatch-

zyxel ex5601-t0Match-

Node

AND

zyxel ex5601-t1_firmwareMatch-

zyxel ex5601-t1Match-

Node

AND

zyxel vmg3927-t50k_firmwareMatch-

zyxel vmg3927-t50kMatch-

Node

AND

zyxel vmg4005-b50a_firmwareMatch-

zyxel vmg4005-b50aMatch-

Node

AND

zyxel vmg4005-b60a_firmwareMatch-

zyxel vmg4005-b60aMatch-

Node

AND

zyxel vmg8623-t50b_firmwareMatch-

zyxel vmg8623-t50bMatch-

Node

AND

zyxel vmg8825-t50k_firmwareMatch-

zyxel vmg8825-t50kMatch-

Node

AND

zyxel ax7501-b0_firmwareMatch-

zyxel ax7501-b0Match-

Node

AND

zyxel pm3100-t0_firmwareMatch-

zyxel pm3100-t0Match-

Node

AND

zyxel pm5100-t0_firmwareMatch-

zyxel pm5100-t0Match-

Node

AND

zyxel pm7300-t0_firmwareMatch-

zyxel pm7300-t0Match-

Node

AND

zyxel pm7320-b0_firmwareMatch-

zyxel pm7320-b0Match-

Node

AND

zyxel pmg5317-t20b_firmwareMatch-

zyxel pmg5317-t20bMatch-

Node

AND

zyxel pmg5617-t20b2_firmwareMatch-

zyxel pmg5617-t20b2Match-

Node

AND

zyxel pmg5617ga_firmwareMatch-

zyxel pmg5617gaMatch-

Node

AND

zyxel pmg5622ga_firmwareMatch-

zyxel pmg5622gaMatch-

Node

AND

zyxel wx3100-t0_firmwareMatch-

zyxel wx3100-t0Match-

Node

AND

zyxel wx3401-b0_firmwareMatch-

zyxel wx3401-b0Match-

Node

AND

zyxel wx5600-t0_firmwareMatch-

zyxel wx5600-t0Match-

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extenders

17 Jun 2026 05:06Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.15.4 - 8.8

EPSS0.01084

CWE-78