CVE-2022-45439

🗓️ 17 Jan 2023 00:00:00Reported by ZyxelType

A pair of spare WiFi credentials is stored in the configuration file of the Zyxel AX7501-B0 firmware prior to V5.17(ABPC.3)C0 in cleartext. An unauthenticated attacker could use the credentials to access the WLAN service if the configuration file has been retrieved from the device by leveraging another known vulnerability

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of Zyxel AX7501-B0 router microprogramming software, related to unencrypted storage of account data, allows a hacker to disclose protected information.	8 Feb 202300:00	–	bdu_fstec
CNNVD	Zyxel AX7501-B0 安全漏洞	17 Jan 202300:00	–	cnnvd
Cvelist	CVE-2022-45439	17 Jan 202300:00	–	cvelist
EUVD	EUVD-2022-48310	3 Oct 202520:07	–	euvd
NVD	CVE-2022-45439	17 Jan 202302:15	–	nvd
OSV	CVE-2022-45439	17 Jan 202302:15	–	osv
Prion	Design/Logic Flaw	17 Jan 202302:15	–	prion
Positive Technologies	PT-2023-1318 · Zyxel · Zyxel Ax7501-B0	17 Jan 202300:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2022-45439: Cleartext Storage of Sensitive Information	17 Jan 202300:00	–	rapid7
RedhatCVE	CVE-2022-45439	23 May 202500:17	–	redhatcve

NVD

Node

AND

zyxel ax7501-b0_firmwareRange<5.17(abpc.3)c0

zyxel ax7501-b0Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "AX7501-B0 firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "< V5.17(ABPC.3)C0"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-cleartext-storage-of-wifi-credentials-and-improper-symbolic-links-of-ftp-for-ax7501-b0-cpe

17 Jun 2026 05:10Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16.5

EPSS0.00196

SSVC

CWE-312