ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2022-43390

—
CVSS 3.1
8.8 high
EPSS
1%p63
Published
()
Modified
Description

A command injection vulnerability in the CGI program of Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to execute some OS commands on a vulnerable device by sending a crafted HTTP request.

Vendors
zyxel
Products
lte7480-m804 firmware, lte7490-m904 firmware, nebula nr5101 firmware, nebula nr7101 firmware, nr5101 firmware, nr7101 firmware, nr7102 firmware, dx3301-t0 firmware, dx4510-b1 firmware, dx5401-b0 firmware, emg3525-t50b firmware, emg5523-t50b firmware
Weakness
CWE-78
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news

No ingested article mentions this CVE yet.