PRIOn knowledge basePRION:CVE-2022-43389

HistoryJan 11, 2023 - 2:15 a.m.

Buffer overflow

2023-01-1102:15:00

PRIOn knowledge base

www.prio-n.com

buffer overflow

zyxel nr7101

web server

vulnerability

os commands

denial-of-service

nvd

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.0%

JSON

A buffer overflow vulnerability in the library of the web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an unauthenticated attacker to execute some OS commands or to cause denial-of-service (DoS) conditions on a vulnerable device.

CPENameOperatorVersion
lte3202-m437_firmwareeq< 1.0abwf.1c0
lte3316-m604_firmwareeq< 2.0abmp.6c0
lte7480-m804_firmwareeq< 1.0abra.6c0
lte7490-m904_firmwareeq< 1.0abqy.5c0
nebula_fwa510_firmwareeq< 1.15acgd.3c0
nebula_fwa710_firmwareeq< 1.15acgc.3c0
nebula_nr7101_firmwareeq< 1.15accc.3c0
nr5103_firmwareeq< 4.19abyc.3c0
nr7101_firmwareeq< 1.0abuv.7c0
nr7102_firmwareeq< 1.0abyd.2c0

Name	Operator	Version
lte3202-m437_firmware	eq	< 1.0abwf.1c0
lte3316-m604_firmware	eq	< 2.0abmp.6c0
lte7480-m804_firmware	eq	< 1.0abra.6c0
lte7490-m904_firmware	eq	< 1.0abqy.5c0
nebula_fwa510_firmware	eq	< 1.15acgd.3c0
nebula_fwa710_firmware	eq	< 1.15acgc.3c0
nebula_nr7101_firmware	eq	< 1.15accc.3c0
nr5103_firmware	eq	< 4.19abyc.3c0
nr7101_firmware	eq	< 1.0abuv.7c0
nr7102_firmware	eq	< 1.0abyd.2c0

Rows per page:

1-10 of 111

References

www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extenders