CVE-2022-43389: Zyxel EP240P Firmware
Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.
A buffer overflow vulnerability in the library of the web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an unauthenticated attacker to execute some OS commands or to cause denial-of-service (DoS) conditions on a vulnerable device.
Affected products
- Zyxel EP240P Firmware: affected versions not specified
- Zyxel LTE3202-m437 Firmware: before 1.00\(abwf.1\)c0 (fixed in 1.00\(abwf.1\)c0)
- Zyxel LTE3316-m604 Firmware: before 2.00\(abmp.6\)c0 (fixed in 2.00\(abmp.6\)c0)
- Zyxel LTE7480-m804 Firmware: before 1.00\(abra.6\)c0 (fixed in 1.00\(abra.6\)c0)
- Zyxel LTE7490-m904 Firmware: before 1.00\(abqy.5\)c0 (fixed in 1.00\(abqy.5\)c0)
- Zyxel Nebula FWA510 Firmware: before 1.15\(acgd.3\)c0 (fixed in 1.15\(acgd.3\)c0)
- Zyxel Nebula FWA710 Firmware: before 1.15\(acgc.3\)c0 (fixed in 1.15\(acgc.3\)c0)
- Zyxel Nebula NR7101 Firmware: before 1.15\(accc.3\)c0 (fixed in 1.15\(accc.3\)c0)
- Zyxel NR5103 Firmware: before 4.19\(abyc.3\)c0 (fixed in 4.19\(abyc.3\)c0)
- Zyxel NR5103E Firmware: affected versions not specified
- Zyxel NR7101 Firmware: before 1.00\(abuv.7\)c0 (fixed in 1.00\(abuv.7\)c0)
- Zyxel NR7102 Firmware: before 1.00\(abyd.2\)c0 (fixed in 1.00\(abyd.2\)c0)
- Zyxel NR7103 Firmware: before 1.00\(accz.1\)c0 (fixed in 1.00\(accz.1\)c0)
- Zyxel PM7320-b0 Firmware: affected versions not specified
- Zyxel PMG5317-t20b Firmware: affected versions not specified
- Zyxel PMG5617GA Firmware: affected versions not specified
- Zyxel PMG5622GA Firmware: affected versions not specified
Published 2023-01-11. Last modified 2026-06-17.