CVE-2022-45439

🗓️ 17 Jan 2023 00:00:00Reported by ZyxelType

A pair of spare WiFi credentials is stored in the configuration file of the Zyxel AX7501-B0 firmware prior to V5.17(ABPC.3)C0 in cleartext. An unauthenticated attacker could use the credentials to access the WLAN service if the configuration file has been retrieved from the device by leveraging another known vulnerability

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	Zyxel AX7501-B0 Router Account Information Disclosure	8 Feb 202300:00	–	bdu_fstec
CNNVD	Zyxel AX7501-B0 security vulnerabilities	17 Jan 202300:00	–	cnnvd
Cvelist	CVE-2022-45439	17 Jan 202300:00	–	cvelist
EUVD	EUVD-2022-48310	3 Oct 202520:07	–	euvd
NVD	CVE-2022-45439	17 Jan 202302:15	–	nvd
osv_cve	CVE-2022-45439	17 Jan 202302:15	–	osv_cve
Prion	Design/Logic Flaw	17 Jan 202302:15	–	prion
Positive Technologies	PT-2023-1318 · Zyxel · Zyxel Ax7501-B0	17 Jan 202300:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2022-45439: Cleartext Storage of Sensitive Information	17 Jan 202300:00	–	rapid7
RedhatCVE	CVE-2022-45439	23 May 202500:17	–	redhatcve

NVD

Vulners

Node

AND

zyxel ax7501-b0_firmwareRange<5.17(abpc.3)c0

zyxel ax7501-b0Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "AX7501-B0 firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "< V5.17(ABPC.3)C0"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-cleartext-storage-of-wifi-credentials-and-improper-symbolic-links-of-ftp-for-ax7501-b0-cpe

17 Jun 2026 05:10Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16.5

EPSS0.00201

SSVC

CWE-312