CVE-2022-43392: Buffer Overflow

First published: Wed Jan 11 2023(Updated: )

A buffer overflow vulnerability in the parameter of web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause denial-of-service (DoS) conditions by sending a crafted authorization request.

Credit: security@zyxel.com.tw security@zyxel.com.tw

Affected Software	Affected Version	How to fix
All of


All of


All of


All of


All of


All of
	<1.00\(abra.6\)c0

All of


All of


All of
	<1.00\(abqy.5\)c0

All of
	<1.15\(acca.3\)c0

All of
	<1.15\(acev.3\)c0

All of
	<1.15\(accg.3\)c0

All of
	<1.15\(accc.3\)c0

All of
	<1.00\(abvc.6\)c0

All of
	<1.00\(abuv.7\)c0

All of
	<1.00\(abyd.2\)c0

All of


All of


All of


All of


All of


All of


All of


All of
	<5.17\(abup.7\)c0

All of


All of


All of
	<5.17\(abqx.7\)c0

All of


All of


All of


All of


All of


All of


All of


All of


All of


All of


All of


All of


All of


All of


All of


All of


All of


All of


All of


All of


All of


Zyxel Lte3301-plus Firmware
Zyxel Lte3301-plus
Zyxel Lte5388-m804 Firmware
Zyxel Lte5388-m804
Zyxel Lte5398-m904 Firmware
Zyxel Lte5398-m904
Zyxel Lte7240-m403 Firmware
Zyxel Lte7240-m403
Zyxel Lte7461-m602 Firmware
Zyxel Lte7461-m602
Zyxel Lte7480-m804 Firmware	<1.00\(abra.6\)c0
Zyxel Lte7480-m804
Zyxel Lte7480-s905 Firmware
Zyxel Lte7480-s905
Zyxel Lte7485-s905 Firmware
Zyxel Lte7485-s905
Zyxel Lte7490-m904 Firmware	<1.00\(abqy.5\)c0
Zyxel Lte7490-m904
Zyxel Nebula Lte3301-plus Firmware	<1.15\(acca.3\)c0
Zyxel Nebula Lte3301-plus
Zyxel Nebula Lte7461-m602 Firmware	<1.15\(acev.3\)c0
Zyxel Nebula Lte7461-m602
Zyxel Nebula Nr5101 Firmware	<1.15\(accg.3\)c0
Zyxel Nebula Nr5101
Zyxel Nebula Nr7101 Firmware	<1.15\(accc.3\)c0
Zyxel Nebula Nr7101
Zyxel Nr5101 Firmware	<1.00\(abvc.6\)c0
Zyxel Nr5101
Zyxel NR7101 firmware	<1.00\(abuv.7\)c0
Zyxel NR7101
Zyxel Nr7102 Firmware	<1.00\(abyd.2\)c0
Zyxel Nr7102
Zyxel Dx3301-t0 Firmware
Zyxel Dx3301-t0
Zyxel Dx4510-b1 Firmware
Zyxel Dx4510-b1
Zyxel DX5401-B0 firmware
Zyxel DX5401-B0
Zyxel Emg3525-t50b Firmware
Zyxel Emg3525-t50b
Zyxel Emg5523-t50b Firmware
Zyxel Emg5523-t50b
Zyxel Emg5723-t50k Firmware
Zyxel Emg5723-t50k
Zyxel Ex3301-t0 Firmware
Zyxel Ex3301-t0
Zyxel Ex3510-b0 Firmware	<5.17\(abup.7\)c0
Zyxel Ex3510-b0
Zyxel Ex5401-b0 Firmware
Zyxel Ex5401-b0
Zyxel Ex5501-b0 Firmware
Zyxel Ex5501-b0
Zyxel Ex5510-b0 Firmware	<5.17\(abqx.7\)c0
Zyxel Ex5510-b0
Zyxel Ex5512-t0 Firmware
Zyxel Ex5512-t0
Zyxel Ex5600-t1 Firmware
Zyxel Ex5600-t1
Zyxel Ex5601-t0 Firmware
Zyxel Ex5601-t0
Zyxel Ex5601-t1 Firmware
Zyxel Ex5601-t1
Zyxel Vmg3927-t50k Firmware
Zyxel Vmg3927-t50k
Zyxel Vmg4005-b50a Firmware
Zyxel Vmg4005-b50a
Zyxel Vmg4005-b60a Firmware
Zyxel Vmg4005-b60a
Zyxel Vmg8623-t50b Firmware
Zyxel Vmg8623-t50b
Zyxel Vmg8825-t50k Firmware
Zyxel Vmg8825-t50k
Zyxel AX7501-B0 firmware
Zyxel AX7501-B0
Zyxel Pm3100-t0 Firmware
Zyxel Pm3100-t0
Zyxel Pm5100-t0 Firmware
Zyxel Pm5100-t0
Zyxel Pm7300-t0 Firmware
Zyxel Pm7300-t0
Zyxel Pm7320-b0 Firmware
Zyxel Pm7320-b0
Zyxel Pmg5317-t20b Firmware
Zyxel Pmg5317-t20b
Zyxel Pmg5617-t20b2 Firmware
Zyxel Pmg5617-t20b2
Zyxel Pmg5617ga Firmware
Zyxel Pmg5617ga
Zyxel Pmg5622ga Firmware
Zyxel Pmg5622ga
Zyxel Wx3100-t0 Firmware
Zyxel Wx3100-t0
Zyxel Wx3401-b0 Firmware
Zyxel Wx3401-b0
Zyxel Wx5600-t0 Firmware
Zyxel Wx5600-t0

Never miss a vulnerability like this again

Reference Links

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extenders

CVE-2022-43392: Buffer Overflow

Never miss a vulnerability like this again

Reference Links

Company

Resources

Contact