Contec Fxa3000 vulnerabilities

2 vulnerabilities

Known vulnerabilities in Contec Fxa3000, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2022-36158contecfxa2000_firmware+3
EPSS score
1.57%
Contec FXA3200 version 1.13.00 and under suffers from Insecure Permissions in the Wireless LAN Manager interface which allows malicious actors to execute Linux commands with root privilege via a hidden web page (/usr/www/ja/mnt_cmd.cgi).8.8CVE-2022-36159contecfxa2000_firmware+3
EPSS score
1.04%
Contec FXA3200 version 1.13 and under were discovered to contain a hard coded hash password for root stored in the component /etc/shadow. As the password strength is weak, it can be cracked in few minutes. Through this credential, a malicious actor can access the Wireless LAN Manager interface and open the telnet port then sniff the traffic or inject any malware.