← Database

CVE-2022-43390

MEDIUM CVSS: 5.4 Published: 2023-01-11 Modified: 2026-06-17

Description

A command injection vulnerability in the CGI program of Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to execute some OS commands on a vulnerable device by sending a crafted HTTP request.

Affected Platforms

Zyxel Ex5401-B0Zyxel Ex3301-T0 FirmwareZyxel Vmg3927-T50K FirmwareZyxel Pm7300-T0 FirmwareZyxel Nr7101 FirmwareZyxel Pm3100-T0 FirmwareZyxel Ax7501-B0Zyxel Ex3510-B0 FirmwareZyxel Vmg8825-T50K FirmwareZyxel Ax7501-B0 Firmware

Weakness Type

CWE-78, CWE-78

References