cve/2022/CVE-2022-36159.md

CVE-2022-36159

Description

Contec FXA3200 version 1.13 and under were discovered to contain a hard coded hash password for root stored in the component /etc/shadow. As the password strength is weak, it can be cracked in few minutes. Through this credential, a malicious actor can access the Wireless LAN Manager interface and open the telnet port then sniff the traffic or inject any malware.

POC

Reference

No PoCs from references.

Github

• https://github.com/0xKoda/Awesome-Avionics-Security