What’s Vulnerable › Vulnerabilities

CVE-2022-45854

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-02-07 · updated 2026-06-17
• Weakness: CWE-754

Description

An improper check for unusual conditions in Zyxel NWA110AX firmware verisons prior to 6.50(ABTG.0)C0, which could allow a LAN attacker to cause a temporary denial-of-service (DoS) by sending crafted VLAN frames if the MAC address of the vulnerable AP were intercepted by the attacker.

Affected products

• Zyxel NWA110AX firmware: through 6.45\(abtg.0\)c0
• Zyxel Nwa210Ax Firmware: through 6.45\(abtd.0\)c0
• Zyxel WAX510D firmware: through 6.45\(abtf.0\)c0
• Zyxel Wax610D Firmware: through 6.45\(abte.0\)c0
• Zyxel Wax630S Firmware: through 6.45\(abzd.0\)c0
• Zyxel WAX650S firmware: through 6.45\(abrm.0\)c0

References

• https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-dos-vulnerability-of-aps
• https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-dos-vulnerability-of-aps

Get alerted when CVE-2022-45854 or the next vulnerability affects your stack