CVE-2022-43389

Severity Score

9.8

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

A buffer overflow vulnerability in the library of the web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an unauthenticated attacker to execute some OS commands or to cause denial-of-service (DoS) conditions on a vulnerable device.

Una vulnerabilidad de desbordamiento de búfer en la librería del servidor web en el firmware Zyxel NR7101 anterior a V1.15(ACCC.3)C0, que podría permitir que un atacante no autenticado ejecute algunos comandos del sistema operativo o cause condiciones de denegación de servicio (DoS) en un dispositivo vulnerable.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

High

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2022-10-18 CVE Reserved
2023-01-11 CVE Published
2024-08-03 CVE Updated
2024-08-03 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CAPEC

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extenders	2023-01-18

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Zyxel Search vendor "Zyxel"	Lte3202-m437 Firmware Search vendor "Zyxel" for product "Lte3202-m437 Firmware"	< 1.00\(abwf.1\)c0 Search vendor "Zyxel" for product "Lte3202-m437 Firmware" and version " < 1.00\(abwf.1\)c0"	-	Affected	in	Zyxel Search vendor "Zyxel"	Lte3202-m437 Search vendor "Zyxel" for product "Lte3202-m437"	-	-	Safe
Zyxel Search vendor "Zyxel"	Lte3316-m604 Firmware Search vendor "Zyxel" for product "Lte3316-m604 Firmware"	< 2.00\(abmp.6\)c0 Search vendor "Zyxel" for product "Lte3316-m604 Firmware" and version " < 2.00\(abmp.6\)c0"	-	Affected	in	Zyxel Search vendor "Zyxel"	Lte3316-m604 Search vendor "Zyxel" for product "Lte3316-m604"	-	-	Safe
Zyxel Search vendor "Zyxel"	Lte7480-m804 Firmware Search vendor "Zyxel" for product "Lte7480-m804 Firmware"	< 1.00\(abra.6\)c0 Search vendor "Zyxel" for product "Lte7480-m804 Firmware" and version " < 1.00\(abra.6\)c0"	-	Affected	in	Zyxel Search vendor "Zyxel"	Lte7480-m804 Search vendor "Zyxel" for product "Lte7480-m804"	-	-	Safe
Zyxel Search vendor "Zyxel"	Lte7490-m904 Firmware Search vendor "Zyxel" for product "Lte7490-m904 Firmware"	< 1.00\(abqy.5\)c0 Search vendor "Zyxel" for product "Lte7490-m904 Firmware" and version " < 1.00\(abqy.5\)c0"	-	Affected	in	Zyxel Search vendor "Zyxel"	Lte7490-m904 Search vendor "Zyxel" for product "Lte7490-m904"	-	-	Safe
Zyxel Search vendor "Zyxel"	Nebula Fwa510 Firmware Search vendor "Zyxel" for product "Nebula Fwa510 Firmware"	< 1.15\(acgd.3\)c0 Search vendor "Zyxel" for product "Nebula Fwa510 Firmware" and version " < 1.15\(acgd.3\)c0"	-	Affected	in	Zyxel Search vendor "Zyxel"	Nebula Fwa510 Search vendor "Zyxel" for product "Nebula Fwa510"	-	-	Safe
Zyxel Search vendor "Zyxel"	Nebula Fwa710 Firmware Search vendor "Zyxel" for product "Nebula Fwa710 Firmware"	< 1.15\(acgc.3\)c0 Search vendor "Zyxel" for product "Nebula Fwa710 Firmware" and version " < 1.15\(acgc.3\)c0"	-	Affected	in	Zyxel Search vendor "Zyxel"	Nebula Fwa710 Search vendor "Zyxel" for product "Nebula Fwa710"	-	-	Safe
Zyxel Search vendor "Zyxel"	Nebula Nr7101 Firmware Search vendor "Zyxel" for product "Nebula Nr7101 Firmware"	< 1.15\(accc.3\)c0 Search vendor "Zyxel" for product "Nebula Nr7101 Firmware" and version " < 1.15\(accc.3\)c0"	-	Affected	in	Zyxel Search vendor "Zyxel"	Nebula Nr7101 Search vendor "Zyxel" for product "Nebula Nr7101"	-	-	Safe
Zyxel Search vendor "Zyxel"	Nr5103 Firmware Search vendor "Zyxel" for product "Nr5103 Firmware"	< 4.19\(abyc.3\)c0 Search vendor "Zyxel" for product "Nr5103 Firmware" and version " < 4.19\(abyc.3\)c0"	-	Affected	in	Zyxel Search vendor "Zyxel"	Nr5103 Search vendor "Zyxel" for product "Nr5103"	-	-	Safe
Zyxel Search vendor "Zyxel"	Nr5103e Firmware Search vendor "Zyxel" for product "Nr5103e Firmware"	-	-	Affected	in	Zyxel Search vendor "Zyxel"	Nr5103e Search vendor "Zyxel" for product "Nr5103e"	-	-	Safe
Zyxel Search vendor "Zyxel"	Nr7101 Firmware Search vendor "Zyxel" for product "Nr7101 Firmware"	< 1.00\(abuv.7\)c0 Search vendor "Zyxel" for product "Nr7101 Firmware" and version " < 1.00\(abuv.7\)c0"	-	Affected	in	Zyxel Search vendor "Zyxel"	Nr7101 Search vendor "Zyxel" for product "Nr7101"	-	-	Safe
Zyxel Search vendor "Zyxel"	Nr7102 Firmware Search vendor "Zyxel" for product "Nr7102 Firmware"	< 1.00\(abyd.2\)c0 Search vendor "Zyxel" for product "Nr7102 Firmware" and version " < 1.00\(abyd.2\)c0"	-	Affected	in	Zyxel Search vendor "Zyxel"	Nr7102 Search vendor "Zyxel" for product "Nr7102"	-	-	Safe
Zyxel Search vendor "Zyxel"	Nr7103 Firmware Search vendor "Zyxel" for product "Nr7103 Firmware"	< 1.00\(accz.1\)c0 Search vendor "Zyxel" for product "Nr7103 Firmware" and version " < 1.00\(accz.1\)c0"	-	Affected	in	Zyxel Search vendor "Zyxel"	Nr7103 Search vendor "Zyxel" for product "Nr7103"	-	-	Safe
Zyxel Search vendor "Zyxel"	Ep240p Firmware Search vendor "Zyxel" for product "Ep240p Firmware"	-	-	Affected	in	Zyxel Search vendor "Zyxel"	Ep240p Search vendor "Zyxel" for product "Ep240p"	-	-	Safe
Zyxel Search vendor "Zyxel"	Pm7320-b0 Firmware Search vendor "Zyxel" for product "Pm7320-b0 Firmware"	-	-	Affected	in	Zyxel Search vendor "Zyxel"	Pm7320-b0 Search vendor "Zyxel" for product "Pm7320-b0"	-	-	Safe
Zyxel Search vendor "Zyxel"	Pmg5317-t20b Firmware Search vendor "Zyxel" for product "Pmg5317-t20b Firmware"	-	-	Affected	in	Zyxel Search vendor "Zyxel"	Pmg5317-t20b Search vendor "Zyxel" for product "Pmg5317-t20b"	-	-	Safe
Zyxel Search vendor "Zyxel"	Pmg5617ga Firmware Search vendor "Zyxel" for product "Pmg5617ga Firmware"	-	-	Affected	in	Zyxel Search vendor "Zyxel"	Pmg5617ga Search vendor "Zyxel" for product "Pmg5617ga"	-	-	Safe
Zyxel Search vendor "Zyxel"	Pmg5622ga Firmware Search vendor "Zyxel" for product "Pmg5622ga Firmware"	-	-	Affected	in	Zyxel Search vendor "Zyxel"	Pmg5622ga Search vendor "Zyxel" for product "Pmg5622ga"	-	-	Safe