CVE-2022-45957
Published: 12 December 2022
Summary
CVE-2022-45957 is a high-severity Out-of-bounds Write (CWE-787) vulnerability in Zte Zxhn-H108Ns Firmware. Its CVSS base score is 7.5 (High).
Operationally, ranked in the top 15.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
The vulnerability is a remote stack buffer overflow, tracked as CVE-2022-45957 and assigned CWE-787, that affects the ZTE ZXHN-H108NS router running firmware version H108NSV1.0.7u_ZRD_GR2_A68. It received a CVSS 3.1 base score of 7.5 reflecting network attack vector, low complexity, and no required authentication or user interaction, with the impact limited to high availability loss.
An unauthenticated attacker with network access can send specially crafted input to trigger the overflow. Successful exploitation results in a denial-of-service condition that disrupts router operation without affecting confidentiality or integrity of data.
The two available references point to PacketStorm entries that describe a stack buffer overflow denial-of-service condition for this exact device and firmware but contain no vendor advisory, patch information, or mitigation guidance.
EPSS for the CVE rose from a low baseline to a recorded peak of 0.0689 on 2025-12-11 before receding to the current value of 0.0213, indicating a temporary increase in observed exploitation interest after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-48799
Vulnerability details
ZTE ZXHN-H108NS router with firmware version H108NSV1.0.7u_ZRD_GR2_A68 is vulnerable to remote stack buffer overflow.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Out-of-bounds writes that corrupt control flow or inject shellcode are rendered non-executable by the same memory protections.