1. Home
  2. CVE Database
  3. CVE-2022-43391
MEDIUM · 6.5

CVE-2022-43391

A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause denial-of-service (DoS) cond...

Vulnerability Description

A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause denial-of-service (DoS) conditions by sending a crafted HTTP request.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
ZyxelLte3301-Plus Firmware-
ZyxelLte3301-Plus-
ZyxelLte5388-M804 Firmware-
ZyxelLte5388-M804-
ZyxelLte5398-M904 Firmware-
ZyxelLte5398-M904-
ZyxelLte7240-M403 Firmware-
ZyxelLte7240-M403-
ZyxelLte7461-M602 Firmware-
ZyxelLte7461-M602-
ZyxelLte7480-M804 Firmware< 1.00\(abra.6\)c0
ZyxelLte7480-M804-
ZyxelLte7480-S905 Firmware-
ZyxelLte7480-S905-
ZyxelLte7485-S905 Firmware-
ZyxelLte7485-S905-
ZyxelLte7490-M904 Firmware< 1.00\(abqy.5\)c0
ZyxelLte7490-M904-
ZyxelNebula Lte3301-Plus Firmware< 1.15\(acca.3\)c0
ZyxelNebula Lte3301-Plus-

Related Weaknesses (CWE)

CWE-120

References

FAQ

What is CVE-2022-43391?

CVE-2022-43391 is a vulnerability with a CVSS score of 6.5 (MEDIUM). A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause denial-of-service (DoS) cond...

How severe is CVE-2022-43391?

CVE-2022-43391 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-43391?

Check the references section above for vendor advisories and patch information. Affected products include: Zyxel Lte3301-Plus Firmware, Zyxel Lte3301-Plus, Zyxel Lte5388-M804 Firmware, Zyxel Lte5388-M804, Zyxel Lte5398-M904 Firmware.