Description
A command injection vulnerability in the CGI program of Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to execute some OS commands on a vulnerable device by sending a crafted HTTP request.
References (1)
Core 1
Scores
CVSS v3
5.4
EPSS
0.0250
EPSS Percentile
85.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-78
Status
published
Products (39)
zyxel/ax7501-b0_firmware
zyxel/dx3301-t0_firmware
zyxel/dx4510-b1_firmware
zyxel/dx5401-b0_firmware
zyxel/emg3525-t50b_firmware
zyxel/emg5523-t50b_firmware
zyxel/emg5723-t50k_firmware
zyxel/ex3301-t0_firmware
zyxel/ex3510-b0_firmware
< 5.17\(abup.7\)c0
zyxel/ex5401-b0_firmware
... and 29 more
Published
Jan 11, 2023
Tracked Since
Feb 18, 2026