Buffer overflow in Zyxel NR7101 firmware
Priority LOW 31CWE-120Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-120 and the CVSS impact.
Summary
A buffer overflow vulnerability in the CGI program of the Zyxel NR7101 firmware versions prior to V1.00(ABUV.8)C0 could allow a remote authenticated attacker to cause denial of service (DoS) conditions by sending a crafted HTTP request to a vulnerable device.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01016 63rd percentileScored 2026-11-07
Fix Fixed NR7101 firmware (Zyxel): V1.00(ABUV.8)C0
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Zyxel | NR7101 firmware | before V1.00(ABUV.8)C0 | V1.00(ABUV.8)C0 | Patch available | CNA |
- NR7101 firmware VendorZyxel Affected before V1.00(ABUV.8)C0 Fixed in V1.00(ABUV.8)C0 Patch available CNA
CPE configurations NVD · 8
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:zyxel:lte7480-m804_firmware:*:*:*:*:*:*:*:* | up to 1.00\(abra.6\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:lte7480-m804:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:lte7490-m904_firmware:*:*:*:*:*:*:*:* | up to 1.00\(abqy.5\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:lte7490-m904:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:nr7101_firmware:*:*:*:*:*:*:*:* | up to 1.00\(abuv.7\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:nr7101:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
| cpe:2.3:o:zyxel:nebula_nr7101_firmware:*:*:*:*:*:*:*:* | up to 1.15\(accc.3\)c0 | Vulnerable | Zyxel |
| cpe:2.3:h:zyxel:nebula_nr7101:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Zyxel |
- cpe:2.3:o:zyxel:lte7480-m804_firmware:*:*:*:*:*:*:*:* Versions up to 1.00\(abra.6\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:lte7480-m804:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:lte7490-m904_firmware:*:*:*:*:*:*:*:* Versions up to 1.00\(abqy.5\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:lte7490-m904:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:nr7101_firmware:*:*:*:*:*:*:*:* Versions up to 1.00\(abuv.7\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:nr7101:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
- cpe:2.3:o:zyxel:nebula_nr7101_firmware:*:*:*:*:*:*:*:* Versions up to 1.15\(accc.3\)c0 Vulnerable ·Zyxel
- cpe:2.3:h:zyxel:nebula_nr7101:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
Remediation
- Fix · CNA NR7101 firmware (Zyxel) Fixed in V1.00(ABUV.8)C0
Timeline
- 2026-10-02 Threatist record created from CVE-2023-27989
- 2026-10-03 Alias added: GHSA-x86w-xv82-wrpx
References
More Zyxel Lte7480-m804 Firmware vulnerabilities
- TI-2022-21187 Buffer overflow in Zyxel NR7101 firmware CVSS 3.1CRITICAL 9.8
- TI-2022-21188 OS command injection in Zyxel NR7101 firmware CVSS 3.1HIGH 8.8
- TI-2024-08115 Buffer overflow in Zyxel VMG8825-T50K firmware CVSS 3.1HIGH 7.5
- TI-2022-21190 Buffer overflow in Zyxel NR7101 firmware CVSS 3.1MEDIUM 6.5
- TI-2022-21189 Buffer overflow in Zyxel NR7101 firmware CVSS 3.1MEDIUM 6.5
- TI-2021-14002 Cleartext storage of sensitive information in Zyxel VMG3625-T50B firmware CVSS 3.1MEDIUM 6.5
Sources
- CVE-2023-27989 · CVE Program
- CVE-2023-27989 · NVD
- FIRST EPSS
- GHSA-x86w-xv82-wrpx · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences