Vulnerability · Published Feb 7, 2023 · Assigned by Zyxel
CVE-2022-45854
Medium 4.3
In plain English
A medium-severity security flaw in NWA110AX firmware from Zyxel. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).
Severity (CVSS 3.1)4.3Medium
Exploit odds (30 days)0.3%top 79.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
An improper check for unusual conditions in Zyxel NWA110AX firmware verisons prior to 6.50(ABTG.0)C0, which could allow a LAN attacker to cause a temporary denial-of-service (DoS) by sending crafted VLAN frames if the MAC address of the vulnerable AP were intercepted by the attacker.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Zyxel | NWA110AX firmware | < 6.50(ABTG.0)C0 |
Weakness: CWE-754 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L