CVE-2023-22922: Buffer Overflow

Q: What is CVE-2023-22922?

CVE-2023-22922 is a buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0.

Q: How does CVE-2023-22922 affect the Zyxel NBG-418N v2 firmware?

CVE-2023-22922 could allow a remote unauthenticated attacker to cause DoS conditions by sending crafted packets if Telnet is enabled on a vulnerable device.

Q: Which software versions are affected by CVE-2023-22922?

The Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 are affected by CVE-2023-22922.

Q: What is the severity of CVE-2023-22922?

CVE-2023-22922 has a severity rating of 7.5 (High).

Q: How can I fix CVE-2023-22922?

To fix CVE-2023-22922, ensure that your Zyxel NBG-418N v2 firmware is updated to at least V1.00(AARP.14)C0 and disable Telnet if not needed.

Published May 1, 2023

Updated

A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote unauthenticated attacker to cause DoS conditions by sending crafted packets if Telnet is enabled on a vulnerable device.

Affected Software

2 affected components

Zyxel Nbg-418n Firmware<=1.00\(aarp.13\)c0

Zyxel NBG-418N=v2

Remediation

Patch Available

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-nbg-418n-v2-home-router

Event History

May 1, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverityWeakness

Data Sourced

05:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2023-22922?

CVE-2023-22922 is a buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0.

How does CVE-2023-22922 affect the Zyxel NBG-418N v2 firmware?

CVE-2023-22922 could allow a remote unauthenticated attacker to cause DoS conditions by sending crafted packets if Telnet is enabled on a vulnerable device.

Which software versions are affected by CVE-2023-22922?