What is CVE-2022-38546?

CVE-2022-38546 is a medium-severity vulnerability in Zyxel Nbg7510, classified under Improper Access Control. CVSS score: 5.3/10. Published 2022-12-21.

How severe is CVE-2022-38546?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Zyxel Nbg7510

CVE-2022-38546

A DNS misconfiguration was found in Zyxel NBG7510 firmware versions prior to V1.00(ABZY.3)C0, which could allow an unauthenticated attacker to access the DNS server when the device is switched to the AP mode.

EPSS: 0.006 (45.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.

Affected products

Zyxel Nbg7510
Zyxel Nbg7510 Firmware — versions < V1.00(ABZY.3)C0
Zyxel Nbg7510_firmware

Weakness classification (CWE)

CWE-284 — Improper Access Control

References

security@zyxel.com.tw (Vendor Advisory)

Frequently asked questions

What is CVE-2022-38546?: CVE-2022-38546 is a medium-severity vulnerability in Zyxel Nbg7510, classified under Improper Access Control. CVSS score: 5.3/10. Published 2022-12-21.
How severe is CVE-2022-38546?: Medium severity. CVSS v3 base score is 5.3 out of 10.