cve/2022/CVE-2022-36159.md

### [CVE-2022-36159](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36159)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

Contec FXA3200 version 1.13 and under were discovered to contain a hard coded hash password for root stored in the component /etc/shadow. As the password strength is weak, it can be cracked in few minutes. Through this credential, a malicious actor can access the Wireless LAN Manager interface and open the telnet port then sniff the traffic or inject any malware.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/0xKoda/Awesome-Avionics-Security