A buffer overflow vulnerability in the CGI program of the Zyxel NR7101 firmware versions prior to V1.00(ABUV.8)C0 could allow a remote authenticated attacker to cause denial of service (DoS) conditions by sending a crafted HTTP request to a vulnerable device.
References
| Link | Resource |
|---|---|
| https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-vulnerability-in-4g-lte-and-5g-nr-outdoor-routers | Patch Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
History
12 Jun 2023, 16:50
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:zyxel:nebula_nr7101:-:*:*:*:*:*:*:* cpe:2.3:h:zyxel:lte7480-m804:-:*:*:*:*:*:*:* cpe:2.3:o:zyxel:lte7480-m804_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:zyxel:nr7101_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:zyxel:lte7490-m904:-:*:*:*:*:*:*:* cpe:2.3:h:zyxel:nr7101:-:*:*:*:*:*:*:* cpe:2.3:o:zyxel:nebula_nr7101_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:zyxel:lte7490-m904_firmware:*:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| References | (MISC) https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-vulnerability-in-4g-lte-and-5g-nr-outdoor-routers - Patch, Third Party Advisory | |
| CWE | CWE-120 |
05 Jun 2023, 13:02
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-05 12:15
Updated : 2024-02-04 23:37
NVD link : CVE-2023-27989
Mitre link : CVE-2023-27989
CVE.ORG link : CVE-2023-27989
JSON object : View
Products Affected
zyxel
- lte7480-m804
- lte7490-m904_firmware
- nr7101
- nebula_nr7101
- lte7480-m804_firmware
- nebula_nr7101_firmware
- nr7101_firmware
- lte7490-m904
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')