CVE-2022-36159

Description

Contec FXA3200 version 1.13 and under were discovered to contain a hard coded hash password for root stored in the component /etc/shadow. As the password strength is weak, it can be cracked in few minutes. Through this credential, a malicious actor can access the Wireless LAN Manager interface and open the telnet port then sniff the traffic or inject any malware.

Weakness classification

• nvd@nist.gov: CWE-798
• 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-798

Primary references

• cve@mitre.org — Broken Link, Third Party Advisory
• cve@mitre.org — Patch, Third Party Advisory
• cve@mitre.org — Exploit, Mitigation, Third Party Advisory
• cve@mitre.org — Product
• af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Mitigation, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Product