High · 8.6 CVE-2022-43389 EUVD-2022-46428GHSA-356g-gwg5-3vmc

A buffer overflow vulnerability in the library of the web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an un…

Published Jan 11, 2023 · Updated Apr 9, 2025 · Assigned by Zyxel

Vendor: Zyxel Product: NR7101 firmware Category: Network devices

Description

A buffer overflow vulnerability in the library of the web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an unauthenticated attacker to execute some OS commands or to cause denial-of-service (DoS) conditions on a vulnerable device.

Affected products

Vendor	Product	Affected	Fixed
Zyxel	NR7101 firmware	< V1.15(ACCC.3)C0	—

References

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extenders