Deviceways

Router

ZyXEL NR7101

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
Hardware revision not specified
Get OpenWrt firmware Release listed · 25.12.6
Hardware revision not specified
Open hardware record Release listed · 25.12.5
Original project github.com

Recorded configuration: 128NAND MB flash; 256 MB RAM

First installation
U-Boot TFTP + serial recovery
Sources

Features & details

Check the project and hardware shown for each feature.

OpenWrt

OpenWrt — Source documentation (openwrt.org)

Installation routes recorded
U-Boot TFTP + serial recovery
Availability recorded by source
Available 2023

Hardware details

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

CVSS 8.6 (v3.1)

NR7101 firmware

A buffer overflow vulnerability in the library of the web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an unauthenticated attacker to execute some OS…

CVE-2022-43389

Affected firmware
< V1.15(ACCC.3)C0
Fix
Fix details in the linked record
Read Zyxel CVE record
Details and sources
CVE updated

A buffer overflow vulnerability in the library of the web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an unauthenticated attacker to execute some OS commands or to cause denial-of-service (DoS) conditions on a vulnerable device.

Security advisory zyxel security advisory for command injection and buffer overflow vulnerabilities of cpe fiber onts and wifi extenders — NR7101 firmware (zyxel.com) ↗
CVE published

CVSS 6.5 (v3.1)

NR7101 firmware

A buffer overflow vulnerability in the CGI program of the Zyxel NR7101 firmware versions prior to V1.00(ABUV.8)C0 could allow a remote authenticated attacker to cause denial of service…

CVE-2023-27989

Affected firmware
< V1.00(ABUV.8)C0
Fix
Fix details in the linked record
Read Zyxel CVE record
Details and sources
CVE updated

A buffer overflow vulnerability in the CGI program of the Zyxel NR7101 firmware versions prior to V1.00(ABUV.8)C0 could allow a remote authenticated attacker to cause denial of service (DoS) conditions by sending a crafted HTTP request to a vulnerable device.

Security advisory zyxel security advisory for buffer overflow vulnerability in 4g lte and 5g nr outdoor routers — NR7101 firmware (zyxel.com) ↗
CVE published

CVSS 6.5 (v3.1)

NR7101 firmware

A buffer overflow vulnerability in the parameter of web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause denial-of-service…

CVE-2022-43392

Affected firmware
< V1.15(ACCC.3)C0
Fix
Fix details in the linked record
Read Zyxel CVE record
Details and sources
CVE updated

A buffer overflow vulnerability in the parameter of web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause denial-of-service (DoS) conditions by sending a crafted authorization request.

Security advisory zyxel security advisory for command injection and buffer overflow vulnerabilities of cpe fiber onts and wifi extenders — NR7101 firmware (zyxel.com) ↗
CVE published

CVSS 6.5 (v3.1)

NR7101 firmware

A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause…

CVE-2022-43391

Affected firmware
< V1.15(ACCC.3)C0
Fix
Fix details in the linked record
Read Zyxel CVE record
Details and sources
CVE updated

A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause denial-of-service (DoS) conditions by sending a crafted HTTP request.

Security advisory zyxel security advisory for command injection and buffer overflow vulnerabilities of cpe fiber onts and wifi extenders — NR7101 firmware (zyxel.com) ↗
CVE published

CVSS 5.4 (v3.1)

NR7101 firmware

A command injection vulnerability in the CGI program of Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to execute some OS commands on a…

CVE-2022-43390

Affected firmware
< V1.15(ACCC.3)C0
Fix
Fix details in the linked record
Read Zyxel CVE record
Details and sources
CVE updated

A command injection vulnerability in the CGI program of Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to execute some OS commands on a vulnerable device by sending a crafted HTTP request.

Security advisory zyxel security advisory for command injection and buffer overflow vulnerabilities of cpe fiber onts and wifi extenders — NR7101 firmware (zyxel.com) ↗
Check more security advisories for this device · CVE.org