Zyxel LTE3316-m604 Firmware vulnerabilities

2 CVEs affecting Zyxel LTE3316-m604 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-22920, published 2023-02-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-22920, published 2023-02-21. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. A security misconfiguration vulnerability exists in the Zyxel LTE3316-M604 firmware version V2.00(ABMP.6)C0 due to a factory default misconfiguration intended for testing purposes. A remote attacker…
CVE-2022-43389, published 2023-01-11. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A buffer overflow vulnerability in the library of the web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an unauthenticated attacker to execute some OS commands or to…