GCVE - cpe:2.3:o:zyxel:lte7490-m904_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:zyxel:lte7490-m904_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Zyxel (`d3fcf896-5708-55f8-8f74-3e19a9d55b89`)
Product	Lte7490 M904 Firmware (`7f8c9365-c4b8-56bd-a030-574834a83891`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-8748`	vulnerable	2026-06-08 07:00:25.540428	Details available HIGH (7.5) A buffer overflow vulnerability in the packet parser of the third-party library "libclinkc" in Zyxel VMG8825-T50K firmware versions through V5.50(ABOM.8.4)C0 could allow an attacker to cause a temporary denial of service (DoS) condition against the web management interface by sending a crafted HTTP POST request to a vulnerable device. Published: 2024-12-03T01:15:46.610Z Updated: 2024-12-03T16:31:58.508Z Open on db.gcve.eu Reference links https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-and-post-authentication-command-injection-vulnerabilities-in-some-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-and-wifi-extenders-12-03-2024	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-27989`	vulnerable	2026-06-08 05:57:42.686953	Details available MEDIUM (6.5) A buffer overflow vulnerability in the CGI program of the Zyxel NR7101 firmware versions prior to V1.00(ABUV.8)C0 could allow a remote authenticated attacker to cause denial of service (DoS) conditions by sending a crafted HTTP request to a vulnerable device. Published: 2023-06-05T11:02:54.929Z Updated: 2025-01-08T17:19:22.830Z Open on db.gcve.eu Reference links https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-vulnerability-in-4g-lte-and-5g-nr-outdoor-routers	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-43392`	vulnerable	2026-06-08 05:49:31.665856	Details available MEDIUM (6.5) A buffer overflow vulnerability in the parameter of web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause denial-of-service (DoS) conditions by sending a crafted authorization request. Published: 2023-01-11T00:00:00.000Z Updated: 2024-11-27T17:13:31.757Z Open on db.gcve.eu Reference links https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extenders	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-43391`	vulnerable	2026-06-08 05:49:31.656849	Details available MEDIUM (6.5) A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause denial-of-service (DoS) conditions by sending a crafted HTTP request. Published: 2023-01-11T00:00:00.000Z Updated: 2024-10-15T17:12:34.022Z Open on db.gcve.eu Reference links https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extenders	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-43390`	vulnerable	2026-06-08 05:49:31.596930	Details available MEDIUM (5.4) A command injection vulnerability in the CGI program of Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to execute some OS commands on a vulnerable device by sending a crafted HTTP request. Published: 2023-01-11T00:00:00.000Z Updated: 2025-04-08T20:16:36.803Z Open on db.gcve.eu Reference links https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extenders	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-43389`	vulnerable	2026-06-08 05:49:31.577187	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.