Contec

Fxa3020 Firmware

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8

CVE-2022-36158

Exploit
  • EPSS 0.19%
  • Published 26.09.2022 11:15:09
  • Last modified 21.05.2025 16:15:26

Contec FXA3200 version 1.13.00 and under suffers from Insecure Permissions in the Wireless LAN Manager interface which allows malicious actors to execute Linux commands with root privilege via a hidden web page (/usr/www/ja/mnt_cmd.cgi).

8.8

CVE-2022-36159

Exploit
  • EPSS 0.11%
  • Published 26.09.2022 11:15:09
  • Last modified 21.05.2025 18:15:47

Contec FXA3200 version 1.13 and under were discovered to contain a hard coded hash password for root stored in the component /etc/shadow. As the password strength is weak, it can be cracked in few minutes. Through this credential, a malicious actor c...