CVE-2022-36158: Contec FXA2000 Firmware

High severity, CVSS 8.0. EPSS: 1.6% chance of exploitation in the next 30 days.

Contec FXA3200 version 1.13.00 and under suffers from Insecure Permissions in the Wireless LAN Manager interface which allows malicious actors to execute Linux commands with root privilege via a hidden web page (/usr/www/ja/mnt_cmd.cgi).

Affected products

• Contec FXA2000 Firmware: before 1.39.00 (fixed in 1.39.00)
• Contec FXA3000 Firmware: up to and including 1.13.00
• Contec FXA3020 Firmware: up to and including 1.13.00
• Contec FXA3200 Firmware: up to and including 1.13.00

Published 2022-09-26. Last modified 2026-06-17.