CVE-2022-43392

published 2023-01-11

CVE-2022-43392: A buffer overflow vulnerability in the parameter of web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker…

medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C N I N A H

A buffer overflow vulnerability in the parameter of web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause denial-of-service (DoS) conditions by sending a crafted authorization request.

Affected

12 ranges

Vendor	Product	Version range	Fixed in
zyxel	ex3510-b0_firmware	< 5.17\(abup.7\)c0	5.17\(abup.7\)c0
zyxel	ex5510-b0_firmware	< 5.17\(abqx.7\)c0	5.17\(abqx.7\)c0
zyxel	lte7480-m804_firmware	< 1.00\(abra.6\)c0	1.00\(abra.6\)c0
zyxel	lte7490-m904_firmware	< 1.00\(abqy.5\)c0	1.00\(abqy.5\)c0
zyxel	nebula_lte3301-plus_firmware	< 1.15\(acca.3\)c0	1.15\(acca.3\)c0
zyxel	nebula_lte7461-m602_firmware	< 1.15\(acev.3\)c0	1.15\(acev.3\)c0
zyxel	nebula_nr5101_firmware	< 1.15\(accg.3\)c0	1.15\(accg.3\)c0
zyxel	nebula_nr7101_firmware	< 1.15\(accc.3\)c0	1.15\(accc.3\)c0
zyxel	nr5101_firmware	< 1.00\(abvc.6\)c0	1.00\(abvc.6\)c0
zyxel	nr7101_firmware	< V1.15(ACCC.3)C0	V1.15(ACCC.3)C0
zyxel	nr7101_firmware	< 1.00\(abuv.7\)c0	1.00\(abuv.7\)c0
zyxel	nr7102_firmware	< 1.00\(abyd.2\)c0	1.00\(abyd.2\)c0

CWE-120