Medium severity · published Feb 7, 2023
CVE-2022-45854
An improper check for unusual conditions in Zyxel NWA110AX firmware verisons prior to 6.50(ABTG.0)C0, which could allow a LAN attacker to cause a temporary denial-of-service (DoS)…
4.3
CVSS
0.3%
EPSS
No
On KEV
Description
An improper check for unusual conditions in Zyxel NWA110AX firmware verisons prior to 6.50(ABTG.0)C0, which could allow a LAN attacker to cause a temporary denial-of-service (DoS) by sending crafted VLAN frames if the MAC address of the vulnerable AP were intercepted by the attacker.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 20% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NF
Nwa110ax Firmware · Zyxel
through 6.45\(abtg.0\)c0 · source: NVD
NF
Nwa210ax Firmware · Zyxel
through 6.45\(abtd.0\)c0 · source: NVD
WF
Wax510d Firmware · Zyxel
through 6.45\(abtf.0\)c0 · source: NVD
WF
Wax610d Firmware · Zyxel
through 6.45\(abte.0\)c0 · source: NVD
WF
Wax630s Firmware · Zyxel
through 6.45\(abzd.0\)c0 · source: NVD
WF
Wax650s Firmware · Zyxel
through 6.45\(abrm.0\)c0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-45854
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-45854
Patch
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-dos-vulnerability-of-aps
More from Nwa110ax Firmware
9.8
CVE-2024-7261
The improper neutralization of special elements in the parameter "host" in the CGI program of Zyxel NWA1123ACv3 firmware version 6.70(ABVT.4) and earlier, WAC500 firmware version…
8.8
CVE-2024-12398
An improper privilege management vulnerability in the web management interface of the Zyxel WBE530 firmware versions through 7.00(ACLE.3) and WBE660S firmware versions through…
7.8
CVE-2022-26532
A argument injection vulnerability in the 'packet-trace' CLI command of Zyxel USG/ZyWALL series firmware versions 4.09 through 4.71, USG FLEX series firmware versions 4.50 through…
7.8
CVE-2022-26531
Multiple improper input validation flaws were identified in some CLI commands of Zyxel USG/ZyWALL series firmware versions 4.09 through 4.71, USG FLEX series firmware versions…
7.2
CVE-2025-6265
A path traversal vulnerability in the file_upload-cgi CGI program of Zyxel NWA50AX PRO firmware version 7.10(ACGE.2) and earlier could allow an authenticated attacker with…