Deviceways

Wireless access point

ZyXEL NWA1123-AC

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
v1 · Qualcomm Atheros QCA9882 Wi-Fi
Processor: Atheros AR9342Open hardware record
Atheros AR9342 / Qualcomm Atheros QCA9882 Wi-Fi · Atheros AR9342
Get OpenWrt firmware Release listed · 25.12.6
Atheros AR9342
Open hardware record
Original project github.com
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

ZyXEL NWA1123-AC PRO — TechInfoDepot (github.com)

Hardware revision
PRO

Device details

ZyXEL NWA1123-AC — TechInfoDepot (github.com)

Hardware revision
v1

Device details

ZyXEL NWA1123-AC PRO — WikiDevi (github.com)

Hardware revision
PRO

Device details

ZyXEL NWA1123-AC SHD — WikiDevi (github.com)

Hardware revision
SHD

Device details

ZyXEL NWA1123-AC — WikiDevi (github.com)

Hardware revision
v1

OpenWrt · Atheros AR9342 / Qualcomm Atheros QCA9882 Wi-Fi · Atheros AR9342

OpenWrt · Atheros AR9342 / Qualcomm Atheros QCA9882 Wi-Fi · Atheros AR9342 — Source documentation (openwrt.org)

Availability recorded by source
Discontinued

Hardware differences

Technical references

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

CVSS 9.8 (v3.1)

NWA1123ACv3 firmware

The improper neutralization of special elements in the parameter "host" in the CGI program of Zyxel NWA1123ACv3 firmware version 6.70(ABVT.4) and earlier, WAC500 firmware version…

CVE-2024-7261

Affected firmware
<= 6.70(ABVT.4)
Fix
Fix details in the linked record
Read Zyxel CVE record
Details and sources
CVE updated

The improper neutralization of special elements in the parameter "host" in the CGI program of Zyxel NWA1123ACv3 firmware version 6.70(ABVT.4) and earlier, WAC500 firmware version 6.70(ABVS.4)

and earlier, WAX655E firmware version 7.00(ACDO.1) and earlier, WBE530 firmware version 7.00(ACLE.1)

and earlier, and USG LITE 60AX firmware version V2.00(ACIP.2) could allow an unauthenticated attacker to execute OS commands by sending a crafted cookie to a vulnerable device.

Security advisory zyxel security advisory for os command injection vulnerability in aps and security router devices 09 03 2024 — NWA1123ACv3 firmware (zyxel.com) ↗
CVE published

ZyXEL NWA1123-AC

ZyXEL NWA1100-N, NWA1100-NH, NWA1121-NI, NWA1123-AC, and NWA1123-NI access points; P-660HN-51, P-663HN-51, VMG1312-B10A, VMG1312-B30A, VMG1312-B30B, VMG4380-B10A, VMG8324-B10A,…

CVE-2015-7256

Affected firmware
Version scope unspecified in source
Fix
Fix details in the linked record
Read certcc CVE record
Details and sources
Public disclosure CVE updated

ZyXEL NWA1100-N, NWA1100-NH, NWA1121-NI, NWA1123-AC, and NWA1123-NI access points; P-660HN-51, P-663HN-51, VMG1312-B10A, VMG1312-B30A, VMG1312-B30B, VMG4380-B10A, VMG8324-B10A, VMG8924-B10A, VMG8924-B30A, and VSG1435-B101 DSL CPEs; PMG5318-B20A GPONs; SBG3300-N000, SBG3300-NB00, and SBG3500-N000 small business gateways; GS1900-8 and GS1900-24 switches; and C1000Z, Q1000, FR1000Z, and P8702N project models use non-unique X.509 certificates and SSH host keys.

Check more security advisories for this device · CVE.org