PT-2023-1558 · Zyxel · Zyxel Nr7101

CVE-2022-43389

·

Published

2023-01-10

·

Updated

2023-01-19

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Zyxel NR7101 firmware versions prior to V1.15(ACCC.3)C0
Description The issue is caused by a buffer overflow vulnerability in the library of the web server. This could allow an unauthenticated attacker to execute some OS commands or cause denial-of-service (DoS) conditions on a vulnerable device.
Recommendations For Zyxel NR7101 firmware versions prior to V1.15(ACCC.3)C0, update to V1.15(ACCC.3)C0 or later to resolve the issue. As a temporary workaround, consider restricting access to the web server library to minimize the risk of exploitation.

Fix

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2023-01023
CVE-2022-43389

Affected Products

Zyxel Nr7101