CVE-2023-27989

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-06-05 · updated 2026-06-17
Weakness: CWE-120

Description

A buffer overflow vulnerability in the CGI program of the Zyxel NR7101 firmware versions prior to V1.00(ABUV.8)C0 could allow a remote authenticated attacker to cause denial of service (DoS) conditions by sending a crafted HTTP request to a vulnerable device.

Affected products

Zyxel Lte7480-M804 Firmware: through 1.00\(abra.6\)c0
Zyxel Lte7490-M904 Firmware: through 1.00\(abqy.5\)c0
Zyxel Nebula Nr7101 Firmware: through 1.15\(accc.3\)c0
Zyxel NR7101 firmware: through 1.00\(abuv.7\)c0

References

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-vulnerability-in-4g-lte-and-5g-nr-outdoor-routers
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-vulnerability-in-4g-lte-and-5g-nr-outdoor-routers

Get alerted when CVE-2023-27989 or the next vulnerability affects your stack