ZeroHour

CVE-2022-36159

PoC
CVSS 3.1
8.8 high
EPSS
1%p61
Published
()
Modified
Description

Contec FXA3200 version 1.13 and under were discovered to contain a hard coded hash password for root stored in the component /etc/shadow. As the password strength is weak, it can be cracked in few minutes. Through this credential, a malicious actor can access the Wireless LAN Manager interface and open the telnet port then sniff the traffic or inject any malware.

Vendors
contec
Products
fxa3000 firmware, fxa3020 firmware, fxa3200 firmware, fxa2000 firmware
Weakness
CWE-798
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news