Exploit for Zyxel zhttpd and libclinkc.so buffer overflows CVE-2022-4510

## https://sploitus.com/exploit?id=SAINT:29970D3CCCF91BB5940AEB374899EB89
Added: 01/17/2023  
CVE: [CVE-2022-4510](<https://vulners.com/cve/CVE-2022-4510>)  


### Background

[Zyxel Firewalls](<https://www.zyxel.com/us/en/products_services/security-next_gen_firewall.shtml>) are a business solution providing protection from malware and unauthorized access. 

### Problem

A buffer overflow vulnerability in Zyxel firewalls could allow a remote, unauthenticated attacker to execute arbitrary code by requesting a specially crafted URI containing a long query string. 

### Resolution

Install the latest updates as described in the [Zyxel advisory](<https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities>). 

### References

<https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-multiple-zyxel-devices/>  


### Platforms

Zyxel