PT-2023-1414
CVE-2022-43393
·
Published
2023-01-11
·
Updated
2023-01-26
Description by
CVSS 3.1
8.2
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Name of the Vulnerable Software and Affected Versions
Zyxel GS1920-24v2 firmware versions prior to V4.70(ABMH.8)C0
Zyxel GS1350, GS1915, GS1920, GS2220 (affected versions not specified)
Description
The issue is related to an improper check for unusual or exceptional conditions in the HTTP request processing function, which could allow an unauthenticated attacker to corrupt the contents of the memory and result in a denial-of-service (DoS) condition on a vulnerable device.
Recommendations
For Zyxel GS1920-24v2 firmware versions prior to V4.70(ABMH.8)C0, update to V4.70(ABMH.8)C0 or later to resolve the issue.
For Zyxel GS1350, GS1915, GS1920, GS2220, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾