VULNERABILITY INTELLIGENCE

CVE-2022-43393

CVSS score8.2 HIGH
EPSS probability0.58%
CISA KEVNot currently listed
Published2023-01-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Description

An improper check for unusual or exceptional conditions in the HTTP request processing function of Zyxel GS1920-24v2 firmware prior to V4.70(ABMH.8)C0, which could allow an unauthenticated attacker to corrupt the contents of the memory and result in a denial-of-service (DoS) condition on a vulnerable device.

Weakness classification

  • security@zyxel.com.tw: CWE-754
  • nvd@nist.gov: CWE-754

Primary references