CVE-2022-43390 : A command injection vulnerability in the CGI program of Zyxel NR7101 firmware pr

A command injection vulnerability in the CGI program of Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to execute some OS commands on a vulnerable device by sending a crafted HTTP request.

Published 2023-01-11 02:15:11

Updated 2023-01-18 21:50:59

Source Zyxel Corporation

View at NVD, CVE.org

Products affected by CVE-2022-43390

Zyxel » Emg3525-t50b Firmware » Version: N/A
cpe:2.3:o:zyxel:emg3525-t50b_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Emg3525-t50b » Version: N/A
Zyxel » Emg5523-t50b Firmware » Version: N/A
cpe:2.3:o:zyxel:emg5523-t50b_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Emg5523-t50b » Version: N/A
Zyxel » Emg5723-t50k Firmware » Version: N/A
cpe:2.3:o:zyxel:emg5723-t50k_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Emg5723-t50k » Version: N/A
Zyxel » Vmg3927-t50k Firmware » Version: N/A
cpe:2.3:o:zyxel:vmg3927-t50k_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Vmg3927-t50k » Version: N/A
Zyxel » Vmg8623-t50b Firmware » Version: N/A
cpe:2.3:o:zyxel:vmg8623-t50b_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Vmg8623-t50b » Version: N/A
Zyxel » Vmg8825-t50k Firmware » Version: N/A
cpe:2.3:o:zyxel:vmg8825-t50k_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Vmg8825-t50k » Version: N/A
Zyxel » Dx5401-b0 Firmware » Version: N/A
cpe:2.3:o:zyxel:dx5401-b0_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Dx5401-b0 » Version: N/A
Zyxel » Ex3510-b0 Firmware
Versions before (<) 5.17\(abup.7\)c0
cpe:2.3:o:zyxel:ex3510-b0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Ex3510-b0 » Version: N/A
Zyxel » Ex5401-b0 Firmware » Version: N/A
cpe:2.3:o:zyxel:ex5401-b0_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Ex5401-b0 » Version: N/A
Zyxel » Ex5501-b0 Firmware » Version: N/A
cpe:2.3:o:zyxel:ex5501-b0_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Ex5501-b0 » Version: N/A
Zyxel » Ax7501-b0 Firmware » Version: N/A
cpe:2.3:o:zyxel:ax7501-b0_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Ax7501-b0 » Version: N/A
Zyxel » Pm7300-t0 Firmware » Version: N/A
cpe:2.3:o:zyxel:pm7300-t0_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Pm7300-t0 » Version: N/A
Zyxel » Pmg5317-t20b Firmware » Version: N/A
cpe:2.3:o:zyxel:pmg5317-t20b_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Pmg5317-t20b » Version: N/A
Zyxel » Pmg5617ga Firmware » Version: N/A
cpe:2.3:o:zyxel:pmg5617ga_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Pmg5617ga » Version: N/A
Zyxel » Pmg5617-t20b2 Firmware » Version: N/A
cpe:2.3:o:zyxel:pmg5617-t20b2_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Pmg5617-t20b2 » Version: N/A
Zyxel » Pmg5622ga Firmware » Version: N/A
cpe:2.3:o:zyxel:pmg5622ga_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Pmg5622ga » Version: N/A
Zyxel » Dx3301-t0 Firmware » Version: N/A
cpe:2.3:o:zyxel:dx3301-t0_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Dx3301-t0 » Version: N/A
Zyxel » Lte7480-m804 Firmware
Versions before (<) 1.00\(abra.6\)c0
cpe:2.3:o:zyxel:lte7480-m804_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Lte7480-m804 » Version: N/A
Zyxel » Nr5101 Firmware
Versions before (<) 1.00\(abvc.6\)c0
cpe:2.3:o:zyxel:nr5101_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Nr5101 » Version: N/A
Zyxel » Nr7101 Firmware
Versions before (<) 1.00\(abuv.7\)c0
cpe:2.3:o:zyxel:nr7101_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Nr7101 » Version: N/A
Zyxel » Nr7102 Firmware
Versions before (<) 1.00\(abyd.2\)c0
cpe:2.3:o:zyxel:nr7102_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Nr7102 » Version: N/A
Zyxel » Lte7490-m904 Firmware
Versions before (<) 1.00\(abqy.5\)c0
cpe:2.3:o:zyxel:lte7490-m904_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Lte7490-m904 » Version: N/A
Zyxel » Nebula Nr5101 Firmware
Versions before (<) 1.15\(accg.3\)c0
cpe:2.3:o:zyxel:nebula_nr5101_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Nebula Nr5101 » Version: N/A
Zyxel » Nebula Nr7101 Firmware
Versions before (<) 1.15\(accc.3\)c0
cpe:2.3:o:zyxel:nebula_nr7101_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Nebula Nr7101 » Version: N/A
Zyxel » Dx4510-b1 Firmware » Version: N/A
cpe:2.3:o:zyxel:dx4510-b1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Dx4510-b1 » Version: N/A
Zyxel » Ex3301-t0 Firmware » Version: N/A
cpe:2.3:o:zyxel:ex3301-t0_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Ex3301-t0 » Version: N/A
Zyxel » Ex5510-b0 Firmware
Versions before (<) 5.17\(abqx.7\)c0
cpe:2.3:o:zyxel:ex5510-b0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Ex5510-b0 » Version: N/A
Zyxel » Ex5512-t0 Firmware » Version: N/A
cpe:2.3:o:zyxel:ex5512-t0_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Ex5512-t0 » Version: N/A
Zyxel » Ex5600-t1 Firmware » Version: N/A
cpe:2.3:o:zyxel:ex5600-t1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Ex5600-t1 » Version: N/A
Zyxel » Ex5601-t0 Firmware » Version: N/A
cpe:2.3:o:zyxel:ex5601-t0_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Ex5601-t0 » Version: N/A
Zyxel » Ex5601-t1 Firmware » Version: N/A
cpe:2.3:o:zyxel:ex5601-t1_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Ex5601-t1 » Version: N/A
Zyxel » Vmg4005-b50a Firmware » Version: N/A
cpe:2.3:o:zyxel:vmg4005-b50a_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Vmg4005-b50a » Version: N/A
Zyxel » Vmg4005-b60a Firmware » Version: N/A
cpe:2.3:o:zyxel:vmg4005-b60a_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Vmg4005-b60a » Version: N/A
Zyxel » Pm3100-t0 Firmware » Version: N/A
cpe:2.3:o:zyxel:pm3100-t0_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Pm3100-t0 » Version: N/A
Zyxel » Pm5100-t0 Firmware » Version: N/A
cpe:2.3:o:zyxel:pm5100-t0_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Pm5100-t0 » Version: N/A
Zyxel » Pm7320-b0 Firmware » Version: N/A
cpe:2.3:o:zyxel:pm7320-b0_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Pm7320-b0 » Version: N/A
Zyxel » Wx3100-t0 Firmware » Version: N/A
cpe:2.3:o:zyxel:wx3100-t0_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Wx3100-t0 » Version: N/A
Zyxel » Wx3401-b0 Firmware » Version: N/A
cpe:2.3:o:zyxel:wx3401-b0_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Wx3401-b0 » Version: N/A
Zyxel » Wx5600-t0 Firmware » Version: N/A
cpe:2.3:o:zyxel:wx5600-t0_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Zyxel » Wx5600-t0 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2022-43390

EPSS FAQ

1.53%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 80 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-43390

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	2.8	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
5.4	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N	2.8	2.5	Zyxel Corporation
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: Low Availability: None

CWE ids for CVE-2022-43390

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
Assigned by:
- nvd@nist.gov (Primary)
- security@zyxel.com.tw (Secondary)

References for CVE-2022-43390

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extenders

Zyxel security advisory for command injection and buffer overflow vulnerabilities of CPE, fiber ONTs, and WiFi extenders | Zyxel Networks
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2022-43390

Products affected by CVE-2022-43390

Exploit prediction scoring system (EPSS) score for CVE-2022-43390

CVSS scores for CVE-2022-43390

CWE ids for CVE-2022-43390

References for CVE-2022-43390