Critical · 9.8 CVE-2022-40602 EUVD-2022-43877GHSA-rvh6-5433-qq87

A flaw in the Zyxel LTE3301-M209 firmware verisons prior to V1.00(ABLG.6)C0 could allow a remote attacker to access the device using an imp…

Published Nov 22, 2022 · Updated Apr 28, 2025 · Assigned by Zyxel

Vendor: Zyxel Product: LTE3301-M209 Category: Network devices

Description

A flaw in the Zyxel LTE3301-M209 firmware verisons prior to V1.00(ABLG.6)C0 could allow a remote attacker to access the device using an improper pre-configured password if the remote administration feature has been enabled by an authenticated administrator.

Affected products

Vendor	Product	Affected	Fixed
Zyxel	LTE3301-M209	< V1.00(ABLG.6)C0	—

References

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-pre-configured-password-vulnerability-of-lte3301-m209