High severity · published Sep 26, 2022
CVE-2022-36159
Contec FXA3200 version 1.13 and under were discovered to contain a hard coded hash password for root stored in the component /etc/shadow
8.8
CVSS
1%
EPSS
No
On KEV
Description
Contec FXA3200 version 1.13 and under were discovered to contain a hard coded hash password for root stored in the component /etc/shadow. As the password strength is weak, it can be cracked in few minutes. Through this credential, a malicious actor can access the Wireless LAN Manager interface and open the telnet port then sniff the traffic or inject any malware.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FF
Fxa2000 Firmware · Contec
before 1.39.00 · source: NVD
FF
Fxa3000 Firmware · Contec
through 1.13.00 · source: NVD
FF
Fxa3020 Firmware · Contec
through 1.13.00 · source: NVD
FF
Fxa3200 Firmware · Contec
through 1.13.00 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-36159
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-36159
Broken Link
https://gist.github.com/Nwqda/aac33d1936d2b514a3268f145345abb4
Patch
https://jvn.jp/en/vu/JVNVU98305100/
Exploit
https://samy.link/blog/contec-flexlan-fxa2000-and-fxa3000-series-vulnerability-repo
Product
https://www.contec.com/products-services/computer-networking/flexlan-fx/fx-accesspoint/fxa3200/feature/#section
More from Fxa2000 Firmware
8.0
CVE-2022-36158
Contec FXA3200 version 1.13.00 and under suffers from Insecure Permissions in the Wireless LAN Manager interface which allows malicious actors to execute Linux commands with root…
