VULNERABILITY INTELLIGENCE

CVE-2022-38546

CVSS score5.3 MEDIUM
EPSS probability0.66%
CISA KEVNot currently listed
Published2022-12-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Description

A DNS misconfiguration was found in Zyxel NBG7510 firmware versions prior to V1.00(ABZY.3)C0, which could allow an unauthenticated attacker to access the DNS server when the device is switched to the AP mode.

Weakness classification

  • security@zyxel.com.tw: CWE-284
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references