CVE-2022-36159
8.8
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD
Description
Contec FXA3200 version 1.13 and under were discovered to contain a hard coded hash password for root stored in the component /etc/shadow. As the password strength is weak, it can be cracked in few minutes. Through this credential, a malicious actor can access the Wireless LAN Manager interface and open the telnet port then sniff the traffic or inject any malware.
Affected (4)
Products: Contec: Fxa3000 Firmware, Fxa3020 Firmware, Fxa3200 Firmware, Fxa2000 Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.13.00 |
| Running on/with | Platform Versions |
|---|---|
Contec Fxa3000 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.13.00 |
| Running on/with | Platform Versions |
|---|---|
Contec Fxa3020 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.13.00 |
| Running on/with | Platform Versions |
|---|---|
Contec Fxa3200 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.39.00 |
| Running on/with | Platform Versions |
|---|---|
Contec Fxa2000 | All versions |
References (8)
Source: cve@mitre.org
Broken LinkThird Party Advisory
Source: cve@mitre.org
ExploitMitigationThird Party Advisory
Source: cve@mitre.org
Product
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitMitigationThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Product
Timeline
No history available yet.