Back to Database
Status published
Unknown
CVE-2022-36158
Contec FXA3200 version 1.13.00 and under suffers from Insecure Permissions...
Vulnerability Description
Contec FXA3200 version 1.13.00 and under suffers from Insecure Permissions in the Wireless LAN Manager interface which allows malicious actors to execute Linux commands with root privilege via a hidden web page (/usr/www/ja/mnt_cmd.cgi).
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-36158
Credits & Attribution
No credits recorded in the NVD database.
References
More from contec
View All →CVE-2022-44355
SolarView Compact 7.0 is vulnerable to Cross-site Scripting (XSS) via...
Unknown
0
CVE-2022-44354
SolarView Compact 4.0 and 5.0 is vulnerable to Unrestricted File...
Unknown
0
CVE-2022-40881
SolarView Compact 6.00 was discovered to contain a command injection...
Unknown
0
CVE-2022-36159
Contec FXA3200 version 1.13 and under were discovered to contain...
Unknown
0
CVE-2022-31374
An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact...
Critical
9.8
Affected Vendor
contec
View all reports →Affected Software
fxa3000 firmware, fxa3020 firmware, fxa3200 firmware, fxa2000 firmware
Vulnerable Versions:
0
Timeline
Official Publish:
September 26th, 2022
Last Modified:
May 21st, 2025
Added to House:
July 21st, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.