2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2022-43389" ,
"sourceIdentifier" : "security@zyxel.com.tw" ,
"published" : "2023-01-11T02:15:11.073" ,
2024-12-08 03:06:42 +00:00
"lastModified" : "2024-11-21T07:26:22.850" ,
"vulnStatus" : "Modified" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "A buffer overflow vulnerability in the library of the web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an unauthenticated attacker to execute some OS commands or to cause denial-of-service (DoS) conditions on a vulnerable device."
2024-04-04 08:46:00 +00:00
} ,
{
"lang" : "es" ,
"value" : "Una vulnerabilidad de desbordamiento de b\u00fafer en la librer\u00eda del servidor web en el firmware Zyxel NR7101 anterior a V1.15(ACCC.3)C0, que podr\u00eda permitir que un atacante no autenticado ejecute algunos comandos del sistema operativo o cause condiciones de denegaci\u00f3n de servicio (DoS) en un dispositivo vulnerable."
2023-04-24 12:24:31 +02:00
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
2024-12-08 03:06:42 +00:00
"source" : "security@zyxel.com.tw" ,
"type" : "Secondary" ,
2023-04-24 12:24:31 +02:00
"cvssData" : {
"version" : "3.1" ,
2024-12-08 03:06:42 +00:00
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" ,
"baseScore" : 8.6 ,
"baseSeverity" : "HIGH" ,
2023-04-24 12:24:31 +02:00
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
2024-12-08 03:06:42 +00:00
"confidentialityImpact" : "LOW" ,
"integrityImpact" : "LOW" ,
"availabilityImpact" : "HIGH"
2023-04-24 12:24:31 +02:00
} ,
"exploitabilityScore" : 3.9 ,
2024-12-08 03:06:42 +00:00
"impactScore" : 4.7
2023-04-24 12:24:31 +02:00
} ,
{
2024-12-08 03:06:42 +00:00
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
2023-04-24 12:24:31 +02:00
"cvssData" : {
"version" : "3.1" ,
2024-12-08 03:06:42 +00:00
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" ,
"baseScore" : 9.8 ,
"baseSeverity" : "CRITICAL" ,
2023-04-24 12:24:31 +02:00
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
2024-12-08 03:06:42 +00:00
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
"availabilityImpact" : "HIGH"
2023-04-24 12:24:31 +02:00
} ,
"exploitabilityScore" : 3.9 ,
2024-12-08 03:06:42 +00:00
"impactScore" : 5.9
2023-04-24 12:24:31 +02:00
}
]
} ,
"weaknesses" : [
{
2024-12-08 03:06:42 +00:00
"source" : "security@zyxel.com.tw" ,
"type" : "Secondary" ,
2023-04-24 12:24:31 +02:00
"description" : [
{
"lang" : "en" ,
"value" : "CWE-120"
}
]
} ,
{
2024-12-08 03:06:42 +00:00
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
2023-04-24 12:24:31 +02:00
"description" : [
{
"lang" : "en" ,
"value" : "CWE-120"
}
]
}
] ,
"configurations" : [
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
2024-12-08 03:06:42 +00:00
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:lte3202-m437_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.00\\(abwf.1\\)c0" ,
"matchCriteriaId" : "CEED7B93-7998-429A-9B16-49BAE465704F"
2023-04-24 12:24:31 +02:00
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
2024-12-08 03:06:42 +00:00
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:zyxel:lte3202-m437:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9AFA5A91-B372-464B-9C8E-DFC6552E64EB"
2023-04-24 12:24:31 +02:00
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
2024-12-08 03:06:42 +00:00
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:lte3316-m604_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "2.00\\(abmp.6\\)c0" ,
"matchCriteriaId" : "5FBDC947-18E3-4A46-A7B3-9AB18032254E"
2023-04-24 12:24:31 +02:00
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
2024-12-08 03:06:42 +00:00
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:zyxel:lte3316-m604:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "557BE1D0-A562-4176-8E59-562E329DD602"
2023-04-24 12:24:31 +02:00
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
2024-12-08 03:06:42 +00:00
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:lte7480-m804_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.00\\(abra.6\\)c0" ,
"matchCriteriaId" : "7DFDC741-78E6-42AA-B647-DEE9F04AA2DD"
2023-04-24 12:24:31 +02:00
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
2024-12-08 03:06:42 +00:00
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:zyxel:lte7480-m804:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E3480021-1538-48ED-BE89-BB0DF562C7DE"
2023-04-24 12:24:31 +02:00
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
2024-12-08 03:06:42 +00:00
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:lte7490-m904_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.00\\(abqy.5\\)c0" ,
"matchCriteriaId" : "FB812F29-2FAE-414C-9047-2471148B1E36"
2023-04-24 12:24:31 +02:00
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
2024-12-08 03:06:42 +00:00
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:zyxel:lte7490-m904:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "DC75F6DE-DCAF-47A0-B6BB-0E050C68AF25"
2023-04-24 12:24:31 +02:00
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:nebula_fwa510_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.15\\(acgd.3\\)c0" ,
"matchCriteriaId" : "E7D1CEC6-D45B-4B6A-8A58-B099ADF57413"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:zyxel:nebula_fwa510:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "80B7099C-DAA5-4902-A62B-B680C9450575"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:nebula_fwa710_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.15\\(acgc.3\\)c0" ,
"matchCriteriaId" : "DB7233D1-3202-471C-AEEA-F76E79F78346"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:zyxel:nebula_fwa710:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "92221518-C7EA-46D7-8037-A580CEA01093"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:nebula_nr7101_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.15\\(accc.3\\)c0" ,
"matchCriteriaId" : "EA537481-4311-4C5E-B577-76C8A789FDAC"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:zyxel:nebula_nr7101:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "52096C1F-F73C-413E-9D37-82EFA4703AEC"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:nr5103_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "4.19\\(abyc.3\\)c0" ,
"matchCriteriaId" : "9B98AC59-4E5F-40AC-B6D6-DD669FAFEDCD"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:zyxel:nr5103:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C821C282-A1E3-4E31-A0C3-96936A4D90CB"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:nr5103e_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "60ABD202-BEB3-4E0D-98CB-30AAA54E5B3B"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:zyxel:nr5103e:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "97C7B929-E318-4E17-8AF9-160C8613132D"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:nr7101_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.00\\(abuv.7\\)c0" ,
"matchCriteriaId" : "63A72A80-DA68-4353-8FEA-D372180F8401"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:zyxel:nr7101:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E4D27B24-9822-432C-8B8B-9546EE32DEC6"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:nr7102_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.00\\(abyd.2\\)c0" ,
"matchCriteriaId" : "C56958A5-2427-4A9A-BD40-3B548437CA36"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:zyxel:nr7102:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F1A15757-DE6F-4A72-9CAD-BAC04BD340A0"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:nr7103_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.00\\(accz.1\\)c0" ,
"matchCriteriaId" : "1FD95007-25FD-4EF9-A461-19FBB4468B3D"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:zyxel:nr7103:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "77584A2D-D878-46E5-A632-10912DC3B794"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:ep240p_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4CB5CB3D-4EBA-4C71-886A-5FF336E9F842"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:zyxel:ep240p:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "91367DDE-F430-42F7-B4F2-28AEF7FDCB12"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:pm7320-b0_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E3B9C504-41A4-4756-BDB0-2EE317F801AE"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:zyxel:pm7320-b0:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E6A479CC-D543-49A1-8A37-7E9D4A0F0009"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:pmg5317-t20b_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "1141E1B7-B6B8-496B-A2CA-A9076D805741"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:zyxel:pmg5317-t20b:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9F1334B5-FC76-412F-A7EF-02EEEE677460"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:pmg5617ga_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "366FB20C-6740-431A-A0CA-6EC3FDD3C505"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:zyxel:pmg5617ga:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9C1B0834-3398-41B0-9A14-7D97768732B4"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:zyxel:pmg5622ga_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F61E8935-26CD-4664-A95C-1BCA77DBC4DF"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:zyxel:pmg5622ga:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "840AF834-B7A6-4ACA-BAB9-996D87476D3D"
}
]
}
]
}
] ,
"references" : [
{
"url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extenders" ,
"source" : "security@zyxel.com.tw" ,
"tags" : [
"Vendor Advisory"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extenders" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Vendor Advisory"
]
2023-04-24 12:24:31 +02:00
}
]
}