Fxa3000 Firmware vulnerabilities

2 known vulnerabilities in Fxa3000 Firmware from Contec. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Fxa3000 Firmware: Use of Hard-coded Credentials

  CVE-2022-36159Sep 26, 2022ContecEPSS 1.04%

  Contec FXA3200 version 1.13 and under were discovered to contain a hard coded hash password for root stored in the component /etc/shadow. As the password strength is weak, it can be cracked in few minutes. Through this credential, a malicious actor can access

• 8.0 High severity

  Fxa3000 Firmware: Direct Request

  CVE-2022-36158Sep 26, 2022ContecEPSS 1.57%

  Contec FXA3200 version 1.13.00 and under suffers from Insecure Permissions in the Wireless LAN Manager interface which allows malicious actors to execute Linux commands with root privilege via a hidden web page (/usr/www/ja/mnt_cmd.cgi).