← Database

CVE-2022-36159

HIGH CVSS: 8.8 Published: 2022-09-26 Modified: 2026-06-17

Description

Contec FXA3200 version 1.13 and under were discovered to contain a hard coded hash password for root stored in the component /etc/shadow. As the password strength is weak, it can be cracked in few minutes. Through this credential, a malicious actor can access the Wireless LAN Manager interface and open the telnet port then sniff the traffic or inject any malware.

Affected Platforms

Contec Fxa2000Contec Fxa3000Contec Fxa3200Contec Fxa3000 FirmwareContec Fxa3200 FirmwareContec Fxa2000 FirmwareContec Fxa3020 FirmwareContec Fxa3020

Weakness Type

CWE-798, CWE-798

References