CVE-2022-43391
A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware...
A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause denial-of-service (DoS) conditions by sending a crafted HTTP request.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause denial-of-service (DoS) conditions by sending a crafted HTTP request.
- Record
CVE-2022-43391- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-120
- Updated
- 2026-11-02
EUVDEUVD-2022-46430
A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause denial-of-service (DoS) conditions by sending a crafted HTTP request.
- Record
EUVD-2022-46430- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6fjf-x8wx-cw7h
A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware...
A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause denial-of-service (DoS) conditions by sending a crafted HTTP request.
- Record
GHSA-6fjf-x8wx-cw7h- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-120
- Updated
- 2026-11-02
NVD
A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause denial-of-service (DoS) conditions by sending a crafted HTTP request.
- Record
CVE-2022-43391- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-120
- Updated
- 2026-11-02
Affected products
- zyxel nr7101 firmware
- zyxel ax7501-b0 firmware
- zyxel dx3301-t0 firmware
- zyxel dx4510-b1 firmware
- zyxel dx5401-b0 firmware
- zyxel emg3525-t50b firmware
- zyxel emg5523-t50b firmware
- zyxel emg5723-t50k firmware
- zyxel ex3301-t0 firmware
- zyxel ex3510-b0 firmware
- zyxel ex5401-b0 firmware
- zyxel ex5501-b0 firmware
Show 36 moreShow less
- zyxel ex5510-b0 firmware
- zyxel ex5512-t0 firmware
- zyxel ex5600-t1 firmware
- zyxel ex5601-t0 firmware
- zyxel ex5601-t1 firmware
- zyxel lte3301-plus firmware
- zyxel lte5388-m804 firmware
- zyxel lte5398-m904 firmware
- zyxel lte7240-m403 firmware
- zyxel lte7461-m602 firmware
- zyxel lte7480-m804 firmware
- zyxel lte7480-s905 firmware
- zyxel lte7485-s905 firmware
- zyxel lte7490-m904 firmware
- zyxel nebula lte3301-plus firmware
- zyxel nebula lte7461-m602 firmware
- zyxel nebula nr5101 firmware
- zyxel nebula nr7101 firmware
- zyxel nr5101 firmware
- zyxel nr7102 firmware
- zyxel pm3100-t0 firmware
- zyxel pm5100-t0 firmware
- zyxel pm7300-t0 firmware
- zyxel pm7320-b0 firmware
- zyxel pmg5317-t20b firmware
- zyxel pmg5617-t20b2 firmware
- zyxel pmg5617ga firmware
- zyxel pmg5622ga firmware
- zyxel vmg3927-t50k firmware
- zyxel vmg4005-b50a firmware
- zyxel vmg4005-b60a firmware
- zyxel vmg8623-t50b firmware
- zyxel vmg8825-t50k firmware
- zyxel wx3100-t0 firmware
- zyxel wx3401-b0 firmware
- zyxel wx5600-t0 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-43391 is a medium vulnerability (CVSS 6.5) in Zyxel Nr7101 Firmware, published January 11, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.75%, the 55th percentile. No source names a fixed version.