CVE-2022-45854

published 2023-02-07

CVE-2022-45854: An improper check for unusual conditions in Zyxel NWA110AX firmware verisons prior to 6.50(ABTG.0)C0, which could allow a LAN attacker to cause a temporary…

Priority P4 17 medium 4.3 CVSS 3.1

AV A AC L PR N UI N S U C N I N A L

An improper check for unusual conditions in Zyxel NWA110AX firmware verisons prior to 6.50(ABTG.0)C0, which could allow a LAN attacker to cause a temporary denial-of-service (DoS) by sending crafted VLAN frames if the MAC address of the vulnerable AP were intercepted by the attacker.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
zyxel	nwa110ax_firmware	< 6.50(ABTG.0)C0	6.50(ABTG.0)C0
zyxel	nwa110ax_firmware	<= 6.45\(abtg.0\)c0	—
zyxel	nwa210ax_firmware	<= 6.45\(abtd.0\)c0	—
zyxel	wax510d_firmware	<= 6.45\(abtf.0\)c0	—
zyxel	wax610d_firmware	<= 6.45\(abte.0\)c0	—
zyxel	wax630s_firmware	<= 6.45\(abzd.0\)c0	—
zyxel	wax650s_firmware	<= 6.45\(abrm.0\)c0	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-754