CVE-2022-36159: High severity contec fxa3000 firmware vulnerability
Contec FXA3200 version 1.13 and under were discovered to contain a hard coded hash password for root stored in the component /etc/shadow. As the password strength is weak, it can be cracked in few minutes. Through this credential, a malicious actor can access the Wireless LAN Manager interface and open the telnet port then sniff the traffic or inject any malware.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2022-36159?
CVE-2022-36159 is considered a high severity vulnerability due to the presence of a hard-coded and weak hashed root password that can be exploited easily.
How do I fix CVE-2022-36159?
To fix CVE-2022-36159, update the affected Contec FXA3200 firmware to a version higher than 1.13.
Which devices are affected by CVE-2022-36159?
CVE-2022-36159 affects the Contec FXA3200 firmware version 1.13 and below.
Can CVE-2022-36159 lead to unauthorized access?
Yes, CVE-2022-36159 allows unauthorized access to the Wireless LAN Manager interface through compromised credentials.
Is there a patch available for CVE-2022-36159?
Yes, a patch is available in the form of a firmware update for the affected Contec devices.