← Vulnerability feed

Vulnerability record · CVE-2022-45854 · published 7 February 2023

CVE-2022-45854: Zyxel nwa110ax firmware vulnerability

Zyxel · Nwa110ax Firmware

An improper check for unusual conditions in Zyxel NWA110AX firmware verisons prior to 6.50(ABTG.0)C0, which could allow a LAN attacker to cause a temporary denial-of-service (DoS) by sending crafted VLAN frames if the MAC address of the vulnerable AP were intercepted by the attacker.

4.3 CVSS 3.1 Medium EPSS 0.28% · top 80.9% CWE-754 · CWE-754
4.3CVSS 3.1 base score
0.28%EPSS exploitation probability, 30 days
NoNot in CISA KEV
6Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

An improper check for unusual conditions in Zyxel NWA110AX firmware verisons prior to 6.50(ABTG.0)C0, which could allow a LAN attacker to cause a temporary denial-of-service (DoS) by sending crafted VLAN frames if the MAC address of the vulnerable AP were intercepted by the attacker.

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

6 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-dos-vulnerability-of-aps PatchVendor Advisory
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-dos-vulnerability-of-aps PatchVendor Advisory

Track CVE-2022-45854 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2024-7261Zyxel nwa110ax firmware os command injection vulnerabilityThe improper neutralization of special elements in the parameter "host" in the CGI program of Zyxel NWA1123ACv3 firmware version 6.70(ABVT.4) and ear…EPSS 11%8.8CVE-2024-12398Zyxel nwa50ax firmware improper privilege management vulnerabilityAn improper privilege management vulnerability in the web management interface of the Zyxel WBE530 firmware versions through 7.00(ACLE.3) and WBE660S…EPSS 0.54%7.8CVE-2022-26531Zyxel vpn100 firmware improper input validation vulnerabilityMultiple improper input validation flaws were identified in some CLI commands of Zyxel USG/ZyWALL series firmware versions 4.09 through 4.71, USG FLE…EPSS 6.2%7.8CVE-2022-26532Zyxel vpn100 firmware argument injection vulnerabilityA argument injection vulnerability in the 'packet-trace' CLI command of Zyxel USG/ZyWALL series firmware versions 4.09 through 4.71, USG FLEX series …EPSS 4.8%7.2CVE-2025-6265Zyxel nwa50ax firmware path traversal vulnerabilityA path traversal vulnerability in the file_upload-cgi CGI program of Zyxel NWA50AX PRO firmware version 7.10(ACGE.2) and earlier could allow an authe…EPSS 0.62%7.2CVE-2023-6398Zyxel atp100 firmware os command injection vulnerabilityA post-authentication command injection vulnerability in the file upload binary in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1,…EPSS 1.3%6.5CVE-2024-1575Zyxel nwa50ax firmware improper privilege management vulnerabilityThe improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70(ACGG.3) and earlier versions could allow an authenticated …EPSS 0.32%6.5CVE-2023-22918Zyxel atp200 firmware vulnerabilityA post-authentication information exposure vulnerability in the CGI program of Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series …EPSS 0.77%

Source: NIST National Vulnerability Database (record CVE-2022-45854), CISA KEV, FIRST EPSS (scores of 2026-10-16). This page is refreshed as NVD updates the record.