VulnerabilityModified
CVE-2022-43392
A buffer overflow vulnerability in the parameter of web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause denial-of-service (DoS) conditions by sending a crafted authorization request.
MEDIUM 6.5EPSS 0.62%
Does this matter?
Lower severity and a low EPSS score (0.62%). Track it; it rarely justifies an emergency change on its own.
Description
A buffer overflow vulnerability in the parameter of web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause denial-of-service (DoS) conditions by sending a crafted authorization request.
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.62% probability · 48th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-120
- Affected
- zyxel/lte3301-plus firmware · zyxel/lte5388-m804 firmware · zyxel/lte5398-m904 firmware · zyxel/lte7240-m403 firmware · zyxel/lte7461-m602 firmware · zyxel/lte7480-m804 firmware · zyxel/lte7480-s905 firmware · zyxel/lte7485-s905 firmware · zyxel/lte7490-m904 firmware · zyxel/nebula lte3301-plus firmware · zyxel/nebula lte7461-m602 firmware · zyxel/nebula nr5101 firmware · zyxel/nebula nr7101 firmware · zyxel/nr5101 firmware · zyxel/nr7101 firmware · zyxel/nr7102 firmware · zyxel/dx3301-t0 firmware · zyxel/dx4510-b1 firmware · zyxel/dx5401-b0 firmware · zyxel/emg3525-t50b firmware · +28 more
- Source
- security@zyxel.com.tw
References
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extendersVendor Advisory
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extendersVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.