CVE-2022-38546

published 2022-12-21

CVE-2022-38546: A DNS misconfiguration was found in Zyxel NBG7510 firmware versions prior to V1.00(ABZY.3)C0, which could allow an unauthenticated attacker to access the DNS…

Priority P2 61 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

A DNS misconfiguration was found in Zyxel NBG7510 firmware versions prior to V1.00(ABZY.3)C0, which could allow an unauthenticated attacker to access the DNS server when the device is switched to the AP mode.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
zyxel	nbg7510_firmware	< V1.00(ABZY.3)C0	V1.00(ABZY.3)C0
zyxel	nbg7510_firmware	<= 1.00\(abzy.2\)c0	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-284