CVE-2022-43391: Zyxel AX7501-b0 Firmware

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause denial-of-service (DoS) conditions by sending a crafted HTTP request.

Affected products

Zyxel AX7501-b0 Firmware: affected versions not specified
Zyxel DX3301-t0 Firmware: affected versions not specified
Zyxel DX4510-b1 Firmware: affected versions not specified
Zyxel DX5401-b0 Firmware: affected versions not specified
Zyxel EMG3525-t50b Firmware: affected versions not specified
Zyxel EMG5523-t50b Firmware: affected versions not specified
Zyxel EMG5723-t50k Firmware: affected versions not specified
Zyxel EX3301-t0 Firmware: affected versions not specified
Zyxel EX3510-b0 Firmware: before 5.17\(abup.7\)c0 (fixed in 5.17\(abup.7\)c0)
Zyxel EX5401-b0 Firmware: affected versions not specified
Zyxel EX5501-b0 Firmware: affected versions not specified
Zyxel EX5510-b0 Firmware: before 5.17\(abqx.7\)c0 (fixed in 5.17\(abqx.7\)c0)
Zyxel EX5512-t0 Firmware: affected versions not specified
Zyxel EX5600-t1 Firmware: affected versions not specified
Zyxel EX5601-t0 Firmware: affected versions not specified
Zyxel EX5601-t1 Firmware: affected versions not specified
Zyxel LTE3301-Plus Firmware: affected versions not specified
Zyxel LTE5388-m804 Firmware: affected versions not specified
Zyxel LTE5398-m904 Firmware: affected versions not specified
Zyxel LTE7240-m403 Firmware: affected versions not specified
Zyxel LTE7461-m602 Firmware: affected versions not specified
Zyxel LTE7480-m804 Firmware: before 1.00\(abra.6\)c0 (fixed in 1.00\(abra.6\)c0)
Zyxel LTE7480-s905 Firmware: affected versions not specified
Zyxel LTE7485-s905 Firmware: affected versions not specified
Zyxel LTE7490-m904 Firmware: before 1.00\(abqy.5\)c0 (fixed in 1.00\(abqy.5\)c0)
and 23 more

Published 2023-01-11. Last modified 2026-06-17.