CVE-2022-45439

The affected product is Zyxel AX7501-B0 firmware prior to V5.17(ABPC.3)C0. The issue: a pair of spare WiFi credentials is stored in the device configuration file in cleartext, enabling an unauthenticated attacker to access WLAN services if the file is retrieved by exploiting another vulnerability...