CVE-2022-43390: Zyxel AX7501-b0 Firmware

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

A command injection vulnerability in the CGI program of Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to execute some OS commands on a vulnerable device by sending a crafted HTTP request.

Affected products

  • Zyxel AX7501-b0 Firmware: affected versions not specified
  • Zyxel DX3301-t0 Firmware: affected versions not specified
  • Zyxel DX4510-b1 Firmware: affected versions not specified
  • Zyxel DX5401-b0 Firmware: affected versions not specified
  • Zyxel EMG3525-t50b Firmware: affected versions not specified
  • Zyxel EMG5523-t50b Firmware: affected versions not specified
  • Zyxel EMG5723-t50k Firmware: affected versions not specified
  • Zyxel EX3301-t0 Firmware: affected versions not specified
  • Zyxel EX3510-b0 Firmware: before 5.17\(abup.7\)c0 (fixed in 5.17\(abup.7\)c0)
  • Zyxel EX5401-b0 Firmware: affected versions not specified
  • Zyxel EX5501-b0 Firmware: affected versions not specified
  • Zyxel EX5510-b0 Firmware: before 5.17\(abqx.7\)c0 (fixed in 5.17\(abqx.7\)c0)
  • Zyxel EX5512-t0 Firmware: affected versions not specified
  • Zyxel EX5600-t1 Firmware: affected versions not specified
  • Zyxel EX5601-t0 Firmware: affected versions not specified
  • Zyxel EX5601-t1 Firmware: affected versions not specified
  • Zyxel LTE7480-m804 Firmware: before 1.00\(abra.6\)c0 (fixed in 1.00\(abra.6\)c0)
  • Zyxel LTE7490-m904 Firmware: before 1.00\(abqy.5\)c0 (fixed in 1.00\(abqy.5\)c0)
  • Zyxel Nebula NR5101 Firmware: before 1.15\(accg.3\)c0 (fixed in 1.15\(accg.3\)c0)
  • Zyxel Nebula NR7101 Firmware: before 1.15\(accc.3\)c0 (fixed in 1.15\(accc.3\)c0)
  • Zyxel NR5101 Firmware: before 1.00\(abvc.6\)c0 (fixed in 1.00\(abvc.6\)c0)
  • Zyxel NR7101 Firmware: before 1.00\(abuv.7\)c0 (fixed in 1.00\(abuv.7\)c0)
  • Zyxel NR7102 Firmware: before 1.00\(abyd.2\)c0 (fixed in 1.00\(abyd.2\)c0)
  • Zyxel PM3100-t0 Firmware: affected versions not specified
  • Zyxel PM5100-t0 Firmware: affected versions not specified
  • and 14 more

Published 2023-01-11. Last modified 2026-06-17.