CVE-2022-43391: Buffer Overflow

Q: What is the severity of CVE-2022-43391?

CVE-2022-43391 has a severity rating classified as high due to its potential to cause denial-of-service conditions.

Q: How do I fix CVE-2022-43391?

To fix CVE-2022-43391, update the affected Zyxel NR7101 firmware to version 1.15(ACCC.3)C0 or higher.

Q: What types of devices are affected by CVE-2022-43391?

Devices such as Zyxel NR7101, LTE3301-plus, and other Zyxel LTE firmware-based products are affected by CVE-2022-43391.

Q: Is CVE-2022-43391 exploited in the wild?

As of now, there is no public information indicating that CVE-2022-43391 is actively being exploited in the wild.

Q: What kind of attack can exploit CVE-2022-43391?

An authenticated attacker can exploit CVE-2022-43391 by sending a crafted HTTP request that triggers a buffer overflow.

Published Jan 11, 2023

Updated

A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause denial-of-service (DoS) conditions by sending a crafted HTTP request.

Affected Software

192 affected components

Zyxel Lte3301-plus Firmware

Zyxel Lte3301-plus

Zyxel Lte5388-m804 Firmware

Zyxel Lte5388-m804

Zyxel Lte5398-m904 Firmware

Zyxel Lte5398-m904

Zyxel Lte7240-m403 Firmware

Zyxel Lte7240-m403

Zyxel Lte7461-m602 Firmware

Zyxel Lte7461-m602

Zyxel Lte7480-m804 Firmware<1.00\(abra.6\)c0

Zyxel Lte7480-m804

Zyxel Lte7480-s905 Firmware

Zyxel Lte7480-s905

Zyxel Lte7485-s905 Firmware

Zyxel Lte7485-s905

Zyxel Lte7490-m904 Firmware<1.00\(abqy.5\)c0

Zyxel Lte7490-m904

Zyxel Nebula Lte3301-plus Firmware<1.15\(acca.3\)c0

Zyxel Nebula Lte3301-plus

Zyxel Nebula Lte7461-m602 Firmware<1.15\(acev.3\)c0

Zyxel Nebula Lte7461-m602

Zyxel Nebula Nr5101 Firmware<1.15\(accg.3\)c0

Zyxel Nebula Nr5101

Zyxel Nebula Nr7101 Firmware<1.15\(accc.3\)c0

Zyxel Nebula Nr7101

Zyxel Nr5101 Firmware<1.00\(abvc.6\)c0

Zyxel Nr5101

Zyxel NR7101 firmware<1.00\(abuv.7\)c0

Zyxel NR7101

Zyxel Nr7102 Firmware<1.00\(abyd.2\)c0

Zyxel Nr7102

Zyxel DX3301-T0 firmware

Zyxel DX3301-T0

Zyxel Dx4510-b1 Firmware

Zyxel Dx4510-b1

Zyxel DX5401-B0 firmware

Zyxel DX5401-B0

Zyxel Emg3525-t50b Firmware

Zyxel Emg3525-t50b

Zyxel Emg5523-t50b Firmware

Zyxel Emg5523-t50b

Zyxel Emg5723-t50k Firmware

Zyxel Emg5723-t50k

Zyxel EX3301-T0 firmware

Zyxel EX3301-T0

Zyxel EX3510-B0 firmware<5.17\(abup.7\)c0

Zyxel EX3510-B0

Zyxel Ex5401-b0 Firmware

Zyxel Ex5401-b0

Zyxel Ex5501-b0 Firmware

Zyxel Ex5501-b0

Zyxel Ex5510-b0 Firmware<5.17\(abqx.7\)c0

Zyxel Ex5510-b0

Zyxel Ex5512-t0 Firmware

Zyxel Ex5512-t0

Zyxel Ex5600-t1 Firmware

Zyxel Ex5600-t1

Zyxel Ex5601-t0 Firmware

Zyxel Ex5601-t0

Zyxel EX5601-T1 firmware

Zyxel EX5601-T1

Zyxel Vmg3927-t50k Firmware

Zyxel Vmg3927-t50k

Zyxel VMG4005-B50A firmware

Zyxel VMG4005-B50A

Zyxel Vmg4005-b60a Firmware

Zyxel Vmg4005-b60a

Zyxel Vmg8623-t50b Firmware

Zyxel Vmg8623-t50b

Zyxel VMG8825-T50K firmware

Zyxel VMG8825-T50K

Zyxel AX7501-B0 firmware

Zyxel AX7501-B0

Zyxel Pm3100-t0 Firmware

Zyxel Pm3100-t0

Zyxel Pm5100-t0 Firmware

Zyxel Pm5100-t0

Zyxel Pm7300-t0 Firmware

Zyxel Pm7300-t0

Zyxel Pm7320-b0 Firmware

Zyxel Pm7320-b0

Zyxel Pmg5317-t20b Firmware

Zyxel Pmg5317-t20b

Zyxel Pmg5617-t20b2 Firmware

Zyxel Pmg5617-t20b2

Zyxel Pmg5617ga Firmware

Zyxel Pmg5617ga

Zyxel Pmg5622ga Firmware

Zyxel Pmg5622ga

Zyxel WX3100-T0 firmware

Zyxel WX3100-T0

Zyxel Wx3401-b0 Firmware

Zyxel Wx3401-b0

Zyxel Wx5600-t0 Firmware

Zyxel Wx5600-t0

All of the following

Zyxel Lte3301-plus Firmware

Zyxel Lte3301-plus

All of the following

Zyxel Lte5388-m804 Firmware

Zyxel Lte5388-m804

All of the following

Zyxel Lte5398-m904 Firmware

Zyxel Lte5398-m904

All of the following

Zyxel Lte7240-m403 Firmware

Zyxel Lte7240-m403

All of the following

Zyxel Lte7461-m602 Firmware

Zyxel Lte7461-m602

All of the following

Zyxel Lte7480-m804 Firmware<1.00\(abra.6\)c0

Zyxel Lte7480-m804

All of the following

Zyxel Lte7480-s905 Firmware

Zyxel Lte7480-s905

All of the following

Zyxel Lte7485-s905 Firmware

Zyxel Lte7485-s905

All of the following

Zyxel Lte7490-m904 Firmware<1.00\(abqy.5\)c0

Zyxel Lte7490-m904

All of the following

Zyxel Nebula Lte3301-plus Firmware<1.15\(acca.3\)c0

Zyxel Nebula Lte3301-plus

All of the following

Zyxel Nebula Lte7461-m602 Firmware<1.15\(acev.3\)c0

Zyxel Nebula Lte7461-m602

All of the following

Zyxel Nebula Nr5101 Firmware<1.15\(accg.3\)c0

Zyxel Nebula Nr5101

All of the following

Zyxel Nebula Nr7101 Firmware<1.15\(accc.3\)c0

Zyxel Nebula Nr7101

All of the following

Zyxel Nr5101 Firmware<1.00\(abvc.6\)c0

Zyxel Nr5101

All of the following

Zyxel NR7101 firmware<1.00\(abuv.7\)c0

Zyxel NR7101

All of the following

Zyxel Nr7102 Firmware<1.00\(abyd.2\)c0

Zyxel Nr7102

All of the following

Zyxel DX3301-T0 firmware

Zyxel DX3301-T0

All of the following

Zyxel Dx4510-b1 Firmware

Zyxel Dx4510-b1

All of the following

Zyxel DX5401-B0 firmware

Zyxel DX5401-B0

All of the following

Zyxel Emg3525-t50b Firmware

Zyxel Emg3525-t50b

All of the following

Zyxel Emg5523-t50b Firmware

Zyxel Emg5523-t50b

All of the following

Zyxel Emg5723-t50k Firmware

Zyxel Emg5723-t50k

All of the following

Zyxel EX3301-T0 firmware

Zyxel EX3301-T0

All of the following

Zyxel EX3510-B0 firmware<5.17\(abup.7\)c0

Zyxel EX3510-B0

All of the following

Zyxel Ex5401-b0 Firmware

Zyxel Ex5401-b0

All of the following

Zyxel Ex5501-b0 Firmware

Zyxel Ex5501-b0

All of the following

Zyxel Ex5510-b0 Firmware<5.17\(abqx.7\)c0

Zyxel Ex5510-b0

All of the following

Zyxel Ex5512-t0 Firmware

Zyxel Ex5512-t0

All of the following

Zyxel Ex5600-t1 Firmware

Zyxel Ex5600-t1

All of the following

Zyxel Ex5601-t0 Firmware

Zyxel Ex5601-t0

All of the following

Zyxel EX5601-T1 firmware

Zyxel EX5601-T1

All of the following

Zyxel Vmg3927-t50k Firmware

Zyxel Vmg3927-t50k

All of the following

Zyxel VMG4005-B50A firmware

Zyxel VMG4005-B50A

All of the following

Zyxel Vmg4005-b60a Firmware

Zyxel Vmg4005-b60a

All of the following

Zyxel Vmg8623-t50b Firmware

Zyxel Vmg8623-t50b

All of the following

Zyxel VMG8825-T50K firmware

Zyxel VMG8825-T50K

All of the following

Zyxel AX7501-B0 firmware

Zyxel AX7501-B0

All of the following

Zyxel Pm3100-t0 Firmware

Zyxel Pm3100-t0

All of the following

Zyxel Pm5100-t0 Firmware

Zyxel Pm5100-t0

All of the following

Zyxel Pm7300-t0 Firmware

Zyxel Pm7300-t0

All of the following

Zyxel Pm7320-b0 Firmware

Zyxel Pm7320-b0

All of the following

Zyxel Pmg5317-t20b Firmware

Zyxel Pmg5317-t20b

All of the following

Zyxel Pmg5617-t20b2 Firmware

Zyxel Pmg5617-t20b2

All of the following

Zyxel Pmg5617ga Firmware

Zyxel Pmg5617ga

All of the following

Zyxel Pmg5622ga Firmware

Zyxel Pmg5622ga

All of the following

Zyxel WX3100-T0 firmware

Zyxel WX3100-T0

All of the following

Zyxel Wx3401-b0 Firmware

Zyxel Wx3401-b0

All of the following

Zyxel Wx5600-t0 Firmware

Zyxel Wx5600-t0

Event History

Jan 11, 2023

CVE Published

12:00 AM

Data Sourced

12:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2022-43391?

CVE-2022-43391 has a severity rating classified as high due to its potential to cause denial-of-service conditions.

How do I fix CVE-2022-43391?

To fix CVE-2022-43391, update the affected Zyxel NR7101 firmware to version 1.15(ACCC.3)C0 or higher.

What types of devices are affected by CVE-2022-43391?

Devices such as Zyxel NR7101, LTE3301-plus, and other Zyxel LTE firmware-based products are affected by CVE-2022-43391.

Is CVE-2022-43391 exploited in the wild?

As of now, there is no public information indicating that CVE-2022-43391 is actively being exploited in the wild.

What kind of attack can exploit CVE-2022-43391?

An authenticated attacker can exploit CVE-2022-43391 by sending a crafted HTTP request that triggers a buffer overflow.

CVE-2022-43391: Buffer Overflow

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2022-43391?

How do I fix CVE-2022-43391?

What types of devices are affected by CVE-2022-43391?

Is CVE-2022-43391 exploited in the wild?

What kind of attack can exploit CVE-2022-43391?

Company

Resources

Contact