GCVE - cpe:2.3:h:zyxel:pmg5617-t20b2:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:zyxel:pmg5617-t20b2:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Zyxel (`d3fcf896-5708-55f8-8f74-3e19a9d55b89`)
Product	Pmg5617 T20B2 (`f2845d49-53da-5321-a8c7-2429368f89ec`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-43392`	not_vulnerable	2026-06-08 05:49:31.673174	Details available MEDIUM (6.5) A buffer overflow vulnerability in the parameter of web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause denial-of-service (DoS) conditions by sending a crafted authorization request. Published: 2023-01-11T00:00:00.000Z Updated: 2024-11-27T17:13:31.757Z Open on db.gcve.eu Reference links https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extenders	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-43391`	not_vulnerable	2026-06-08 05:49:31.663274	Details available MEDIUM (6.5) A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause denial-of-service (DoS) conditions by sending a crafted HTTP request. Published: 2023-01-11T00:00:00.000Z Updated: 2024-10-15T17:12:34.022Z Open on db.gcve.eu Reference links https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extenders	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-43390`	not_vulnerable	2026-06-08 05:49:31.638938	Details available MEDIUM (5.4) A command injection vulnerability in the CGI program of Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to execute some OS commands on a vulnerable device by sending a crafted HTTP request. Published: 2023-01-11T00:00:00.000Z Updated: 2025-04-08T20:16:36.803Z Open on db.gcve.eu Reference links https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extenders	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-26414`	not_vulnerable	2026-06-08 05:41:51.944410	Details available MEDIUM (6) A potential buffer overflow vulnerability was identified in some internal functions of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0, which could be exploited by a local authenticated attacker to cause a denial of service. Published: 2022-04-11T12:05:11.000Z Updated: 2024-08-03T05:03:32.637Z Open on db.gcve.eu Reference links https://www.zyxel.com/support/OS-command-injection-and-buffer-overflow-vulnerabilities-of-CPE-and-ONTs.shtml	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-26413`	not_vulnerable	2026-06-08 05:41:51.939358	Details available HIGH (8) A command injection vulnerability in the CGI program of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0 could allow a local authenticated attacker to execute arbitrary OS commands on a vulnerable device via a LAN interface. Published: 2022-04-11T12:00:19.000Z Updated: 2024-08-03T05:03:32.814Z Open on db.gcve.eu Reference links https://www.zyxel.com/support/OS-command-injection-and-buffer-overflow-vulnerabilities-of-CPE-and-ONTs.shtml	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-35036`	not_vulnerable	2026-06-08 05:32:17.523131	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.