Contec FXA3000 Firmware vulnerabilities

2 CVEs affecting Contec FXA3000 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-36159, published 2022-09-26.

More from Contec.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-36158, published 2022-09-26. High severity, CVSS 8.0. EPSS: 1.6% chance of exploitation in the next 30 days. Contec FXA3200 version 1.13.00 and under suffers from Insecure Permissions in the Wireless LAN Manager interface which allows malicious actors to execute Linux commands with root privilege via a…
• CVE-2022-36159, published 2022-09-26. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. Contec FXA3200 version 1.13 and under were discovered to contain a hard coded hash password for root stored in the component /etc/shadow. As the password strength is weak, it can be cracked in few…