Vulnerability Database

318,002

Total vulnerabilities in the database

CVE-2023-27989

A buffer overflow vulnerability in the CGI program of the Zyxel NR7101 firmware versions prior to V1.00(ABUV.8)C0 could allow a remote authenticated attacker to cause denial of service (DoS) conditions by sending a crafted HTTP request to a vulnerable device.

  • Published: Jun 5, 2023
  • Updated: Nov 16, 2025
  • CVE: CVE-2023-27989
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWEs:

Software From Fixed in
zyxel / lte7480-m804_firmware - 1.00\(abra.6\)c0.x
zyxel / lte7490-m904_firmware - 1.00\(abqy.5\)c0.x
zyxel / nr7101_firmware - 1.00\(abuv.7\)c0.x
zyxel / nebula_nr7101_firmware - 1.15\(accc.3\)c0.x