CVE-2022-43393

HIGH

8.2

CVSS Score

Published: January 11, 2023 at 12:00 AM UTC

Updated: June 17, 2026 at 05:06 AM UTC

90 products affected across 1 vendorXgs2220-30hp FirmwareXgs2220-54hp FirmwareXs1930-12hp Firmware

Using GS1920-24v2 firmware by Zyxel?

Get instant alerts when new vulnerabilities affect GS1920-24v2 firmware - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.2

Exploit prediction

EPSS 0.6%

SSVC

No known exploit

Description

An improper check for unusual or exceptional conditions in the HTTP request processing function of Zyxel GS1920-24v2 firmware prior to V4.70(ABMH.8)C0, which could allow an unauthenticated attacker to corrupt the contents of the memory and result in a denial-of-service (DoS) condition on a vulnerable device.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Gs1350-12hp Firmware · Zyxel

95%

v < 4.70(abpj.5)c0

Affected range stops below 4.70(abpj.5)c0, so it looks safe — our inference, not a vendor statement

zyxel-gs1350-12hp (same device)

Gs1350-18hp Firmware · Zyxel

95%

v < 4.70(abpk.5)c0

Affected range stops below 4.70(abpk.5)c0, so it looks safe — our inference, not a vendor statement

zyxel-gs1350-18hp (same device)

Gs1350-26hp Firmware · Zyxel

95%

v < 4.70(abpl.5)c0

Affected range stops below 4.70(abpl.5)c0, so it looks safe — our inference, not a vendor statement

zyxel-gs1350-26hp (same device)

Gs1350-6hp Firmware · Zyxel

95%

v < 4.70(abpi.5)c0

Affected range stops below 4.70(abpi.5)c0, so it looks safe — our inference, not a vendor statement

zyxel-gs1350-6hp (same device)

Gs1915-24e Firmware · Zyxel

95%

v < 4.70(acdr.3)c0

Affected range stops below 4.70(acdr.3)c0, so it looks safe — our inference, not a vendor statement

zyxel-gs1915-24e (same device)

Gs1915-24ep Firmware · Zyxel

95%

v < 4.70(acds.3)c0

Affected range stops below 4.70(acds.3)c0, so it looks safe — our inference, not a vendor statement

zyxel-gs1915-24ep (same device)

Gs1915-8 Firmware · Zyxel

95%

v < 4.70(acap.3)c0

Affected range stops below 4.70(acap.3)c0, so it looks safe — our inference, not a vendor statement

zyxel-gs1915-8 (same device)

Gs1915-8ep Firmware · Zyxel

95%

v < 4.70(acaq.3)c0

Affected range stops below 4.70(acaq.3)c0, so it looks safe — our inference, not a vendor statement

zyxel-gs1915-8ep (same device)

Gs1920-24hpv2 Firmware · Zyxel

95%

v < 4.70(abmi.8)c0

Affected range stops below 4.70(abmi.8)c0, so it looks safe — our inference, not a vendor statement

zyxel-gs1920-24hpv2 (same device)

GS1920-24v2 firmware · Zyxel

95%

v < 4.70(abmh.8)c0< V4.70(ABMH.8)C0

Affected range stops below 4.70(abmh.8)c0, so it looks safe — our inference, not a vendor statement

zyxel-gs1920-24v2 (same device)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-dos-vulnerability-of-switches

References (1)

Vendor Advisory

Source: [email protected]

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-dos-vulnerability-of-switches

SSVC — Action Prioritization

SSVCNo known exploitAutomatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

8.2HIGHZyxel

Attack Vector: NETWORK
Complexity: LOW
Privileges: NONE
User Interaction: NONE
Scope: UNCHANGED
Confidentiality: NONE
Integrity: LOW
Availability: HIGH

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-754

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card