CVE-2022-43390
Summary
| CVE | CVE-2022-43390 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-01-11 02:15:00 UTC |
| Updated | 2023-01-18 21:50:00 UTC |
| Description | A command injection vulnerability in the CGI program of Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to execute some OS commands on a vulnerable device by sending a crafted HTTP request. |
Risk And Classification
Problem Types: CWE-78
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Zyxel | Ax7501-b0 | - | All | All | All |
| Operating System | Zyxel | Ax7501-b0 Firmware | - | All | All | All |
| Hardware | Zyxel | Dx3301-t0 | - | All | All | All |
| Operating System | Zyxel | Dx3301-t0 Firmware | - | All | All | All |
| Hardware | Zyxel | Dx4510-b1 | - | All | All | All |
| Operating System | Zyxel | Dx4510-b1 Firmware | - | All | All | All |
| Hardware | Zyxel | Dx5401-b0 | - | All | All | All |
| Operating System | Zyxel | Dx5401-b0 Firmware | - | All | All | All |
| Hardware | Zyxel | Emg3525-t50b | - | All | All | All |
| Operating System | Zyxel | Emg3525-t50b Firmware | - | All | All | All |
| Hardware | Zyxel | Emg5523-t50b | - | All | All | All |
| Operating System | Zyxel | Emg5523-t50b Firmware | - | All | All | All |
| Hardware | Zyxel | Emg5723-t50k | - | All | All | All |
| Operating System | Zyxel | Emg5723-t50k Firmware | - | All | All | All |
| Hardware | Zyxel | Ex3301-t0 | - | All | All | All |
| Operating System | Zyxel | Ex3301-t0 Firmware | - | All | All | All |
| Hardware | Zyxel | Ex3510-b0 | - | All | All | All |
| Operating System | Zyxel | Ex3510-b0 Firmware | All | All | All | All |
| Hardware | Zyxel | Ex5401-b0 | - | All | All | All |
| Operating System | Zyxel | Ex5401-b0 Firmware | - | All | All | All |
| Hardware | Zyxel | Ex5501-b0 | - | All | All | All |
| Operating System | Zyxel | Ex5501-b0 Firmware | - | All | All | All |
| Hardware | Zyxel | Ex5510-b0 | - | All | All | All |
| Operating System | Zyxel | Ex5510-b0 Firmware | All | All | All | All |
| Hardware | Zyxel | Ex5512-t0 | - | All | All | All |
| Operating System | Zyxel | Ex5512-t0 Firmware | - | All | All | All |
| Hardware | Zyxel | Ex5600-t1 | - | All | All | All |
| Operating System | Zyxel | Ex5600-t1 Firmware | - | All | All | All |
| Hardware | Zyxel | Ex5601-t0 | - | All | All | All |
| Operating System | Zyxel | Ex5601-t0 Firmware | - | All | All | All |
| Hardware | Zyxel | Ex5601-t1 | - | All | All | All |
| Operating System | Zyxel | Ex5601-t1 Firmware | - | All | All | All |
| Hardware | Zyxel | Lte7480-m804 | - | All | All | All |
| Operating System | Zyxel | Lte7480-m804 Firmware | All | All | All | All |
| Hardware | Zyxel | Lte7490-m904 | - | All | All | All |
| Operating System | Zyxel | Lte7490-m904 Firmware | All | All | All | All |
| Hardware | Zyxel | Nebula Nr5101 | - | All | All | All |
| Operating System | Zyxel | Nebula Nr5101 Firmware | All | All | All | All |
| Hardware | Zyxel | Nebula Nr7101 | - | All | All | All |
| Operating System | Zyxel | Nebula Nr7101 Firmware | All | All | All | All |
| Hardware | Zyxel | Nr5101 | - | All | All | All |
| Operating System | Zyxel | Nr5101 Firmware | All | All | All | All |
| Hardware | Zyxel | Nr7101 | - | All | All | All |
| Operating System | Zyxel | Nr7101 Firmware | All | All | All | All |
| Hardware | Zyxel | Nr7102 | - | All | All | All |
| Operating System | Zyxel | Nr7102 Firmware | All | All | All | All |
| Hardware | Zyxel | Pm3100-t0 | - | All | All | All |
| Operating System | Zyxel | Pm3100-t0 Firmware | - | All | All | All |
| Hardware | Zyxel | Pm5100-t0 | - | All | All | All |
| Operating System | Zyxel | Pm5100-t0 Firmware | - | All | All | All |
| Hardware | Zyxel | Pm7300-t0 | - | All | All | All |
| Operating System | Zyxel | Pm7300-t0 Firmware | - | All | All | All |
| Hardware | Zyxel | Pm7320-b0 | - | All | All | All |
| Operating System | Zyxel | Pm7320-b0 Firmware | - | All | All | All |
| Hardware | Zyxel | Pmg5317-t20b | - | All | All | All |
| Operating System | Zyxel | Pmg5317-t20b Firmware | - | All | All | All |
| Hardware | Zyxel | Pmg5617-t20b2 | - | All | All | All |
| Operating System | Zyxel | Pmg5617-t20b2 Firmware | - | All | All | All |
| Hardware | Zyxel | Pmg5617ga | - | All | All | All |
| Operating System | Zyxel | Pmg5617ga Firmware | - | All | All | All |
| Hardware | Zyxel | Pmg5622ga | - | All | All | All |
| Operating System | Zyxel | Pmg5622ga Firmware | - | All | All | All |
| Hardware | Zyxel | Vmg3927-t50k | - | All | All | All |
| Operating System | Zyxel | Vmg3927-t50k Firmware | - | All | All | All |
| Hardware | Zyxel | Vmg4005-b50a | - | All | All | All |
| Operating System | Zyxel | Vmg4005-b50a Firmware | - | All | All | All |
| Hardware | Zyxel | Vmg4005-b60a | - | All | All | All |
| Operating System | Zyxel | Vmg4005-b60a Firmware | - | All | All | All |
| Hardware | Zyxel | Vmg8623-t50b | - | All | All | All |
| Operating System | Zyxel | Vmg8623-t50b Firmware | - | All | All | All |
| Hardware | Zyxel | Vmg8825-t50k | - | All | All | All |
| Operating System | Zyxel | Vmg8825-t50k Firmware | - | All | All | All |
| Hardware | Zyxel | Wx3100-t0 | - | All | All | All |
| Operating System | Zyxel | Wx3100-t0 Firmware | - | All | All | All |
| Hardware | Zyxel | Wx3401-b0 | - | All | All | All |
| Operating System | Zyxel | Wx3401-b0 Firmware | - | All | All | All |
| Hardware | Zyxel | Wx5600-t0 | - | All | All | All |
| Operating System | Zyxel | Wx5600-t0 Firmware | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Zyxel security advisory for command injection and buffer overflow vulnerabilities of CPE, fiber ONTs, and WiFi extenders | Zyxel Networks | CONFIRM | www.zyxel.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.