CVE-2022-45439

🗓️ 17 Jan 2023 00:00:00Reported by ZyxelType

A pair of spare WiFi credentials is stored in the configuration file of the Zyxel AX7501-B0 firmware prior to V5.17(ABPC.3)C0 in cleartext. An unauthenticated attacker could use the credentials to access the WLAN service if the configuration file has been retrieved from the device by leveraging another known vulnerability

Reporter	Title	Published	Views	Family All 9
CNNVD	Zyxel AX7501-B0 安全漏洞	17 Jan 202300:00	–	cnnvd
Cvelist	CVE-2022-45439	17 Jan 202300:00	–	cvelist
EUVD	EUVD-2022-48310	3 Oct 202520:07	–	euvd
NVD	CVE-2022-45439	17 Jan 202302:15	–	nvd
OSV	CVE-2022-45439	17 Jan 202302:15	–	osv
Prion	Design/Logic Flaw	17 Jan 202302:15	–	prion
Positive Technologies	PT-2023-1318 · Zyxel · Zyxel Ax7501-B0	17 Jan 202300:00	–	ptsecurity
RedhatCVE	CVE-2022-45439	23 May 202500:17	–	redhatcve
Vulnrichment	CVE-2022-45439	17 Jan 202300:00	–	vulnrichment

NVD

Node

zyxel ax7501-b0_firmwareRange<5.17(abpc.3)c0

AND

zyxel ax7501-b0Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "AX7501-B0 firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "< V5.17(ABPC.3)C0"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-cleartext-storage-of-wifi-credentials-and-improper-symbolic-links-of-ftp-for-ax7501-b0-cpe

06 Dec 2024 07:15Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16.5

EPSS0.00222

SSVC

CWE-312