CVE-2022-45854

MEDIUM
4.3
CVSS Score
Published: February 7, 2023 at 12:00 AM UTC
Updated: June 17, 2026 at 05:10 AM UTC
12 products affected across 1 vendorNWA210AX FirmwareWAX650S FirmwareWAX610D Firmware

Using NWA110AX firmware by Zyxel?

Get instant alerts when new vulnerabilities affect NWA110AX firmware - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM4.3
Exploit prediction
EPSS 0.3%

Description

An improper check for unusual conditions in Zyxel NWA110AX firmware verisons prior to 6.50(ABTG.0)C0, which could allow a LAN attacker to cause a temporary denial-of-service (DoS) by sending crafted VLAN frames if the MAC address of the vulnerable AP were intercepted by the attacker.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v ≤ 6.45(abtg.0)c0v < 6.50
Affected range stops below 6.50, so it looks safe — our inference, not a vendor statement
zyxel-nwa110ax (same device)
v ≤ 6.45(abtd.0)c0
zyxel-nwa210ax (same device)
v ≤ 6.45(abtf.0)c0
zyxel-wax510d (same device)
v ≤ 6.45(abte.0)c0
zyxel-wax610d (same device)
v ≤ 6.45(abzd.0)c0
zyxel-wax630s (same device)
v ≤ 6.45(abrm.0)c0
zyxel-wax650s (same device)
All versions
All versions
All versions
All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

CVSS

4.3MEDIUMZyxel
Attack Vector
ADJACENT_NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
LOW
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-754

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card