Skip to content
Fencer Vulns
high 8.2

CVE-2022-43393 json

An improper check for unusual or exceptional conditions in the HTTP request processing function of Zyxel GS1920-24v2 firmware prior to V4.7…

published 2023-01-11 3 y ago modified 2026-06-17 4 mo ago also EUVD-2022-46432

cvss
8.2
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.6%
EPSS 0.6% chance of exploitation in 30 days, percentile 48%
public exploits
0
none known

Summary

An improper check for unusual or exceptional conditions in the HTTP request processing function of Zyxel GS1920-24v2 firmware prior to V4.70(ABMH.8)C0, which could allow an unauthenticated attacker to corrupt the contents of the memory and result in a denial-of-service (DoS) condition on a vulnerable device.

Patch / fix

  • zyxel gs1350-6hp_firmware 4.70\(abpi.5\)c0
  • zyxel gs1350-12hp_firmware 4.70\(abpj.5\)c0
  • zyxel gs1350-18hp_firmware 4.70\(abpk.5\)c0
  • zyxel gs1350-26hp_firmware 4.70\(abpl.5\)c0
  • zyxel gs1915-8_firmware 4.70\(acap.3\)c0
  • zyxel gs1915-8ep_firmware 4.70\(acaq.3\)c0
  • zyxel gs1915-24e_firmware 4.70\(acdr.3\)c0
  • zyxel gs1915-24ep_firmware 4.70\(acds.3\)c0
  • zyxel gs1920-24v2_firmware 4.70\(abmh.8\)c0
  • zyxel gs1920-48v2_firmware 4.70\(abmj.8\)c0
  • zyxel gs1920-24hpv2_firmware 4.70\(abmi.8\)c0
  • zyxel gs1920-48hpv2_firmware 4.70\(abmk.8\)c0
  • zyxel gs2220-10_firmware 4.70\(abro.6\)c0
  • zyxel gs2220-28_firmware 4.70\(abrq.6\)c0
  • zyxel gs2220-50_firmware 4.70\(abrs.6\)c0
  • zyxel gs2220-10hp_firmware 4.70\(abrp.6\)c0
  • zyxel gs2220-28hp_firmware 4.70\(abrr.6\)c0
  • zyxel gs2220-50hp_firmware 4.70\(abrt.6\)c0
  • zyxel xgs1930-28_firmware 4.70\(abht.5\)c0
  • zyxel xgs1930-28hp_firmware 4.70\(abhs.5\)c0

CISA SSVC

Exploitation
none
Automatable
yes
Technical impact
partial
Assessed
19 mo ago

Exploit prediction

0.58% chance of exploitation in the next 30 days, higher than 48% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
NVD 3.1 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Affected products

  • Zyxel GS1920-24v2 firmware

Classification

Weakness
  • CWE-754 Improper Check for Unusual or Exceptional Conditions

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.