High severity · published Sep 26, 2022
CVE-2022-36158
Contec FXA3200 version 1.13.00 and under suffers from Insecure Permissions in the Wireless LAN Manager interface which allows malicious actors to execute Linux commands with root…
8.0
CVSS
1.6%
EPSS
No
On KEV
Description
Contec FXA3200 version 1.13.00 and under suffers from Insecure Permissions in the Wireless LAN Manager interface which allows malicious actors to execute Linux commands with root privilege via a hidden web page (/usr/www/ja/mnt_cmd.cgi).
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FF
Fxa2000 Firmware · Contec
before 1.39.00 · source: NVD
FF
Fxa3000 Firmware · Contec
through 1.13.00 · source: NVD
FF
Fxa3020 Firmware · Contec
through 1.13.00 · source: NVD
FF
Fxa3200 Firmware · Contec
through 1.13.00 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-36158
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-36158
Broken Link
https://gist.github.com/Nwqda/aac33d1936d2b514a3268f145345abb4
Patch
https://jvn.jp/en/vu/JVNVU98305100/
Exploit
https://samy.link/blog/contec-flexlan-fxa2000-and-fxa3000-series-vulnerability-repo
Product
https://www.contec.com/products-services/computer-networking/flexlan-fx/fx-accesspoint/fxa3200/feature/#section
More from Fxa2000 Firmware
8.8
CVE-2022-36159
Contec FXA3200 version 1.13 and under were discovered to contain a hard coded hash password for root stored in the component /etc/shadow