CVE-2022-45439

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A pair of spare WiFi credentials is stored in the configuration file of the Zyxel AX7501-B0 firmware prior to V5.17(ABPC.3)C0 in cleartext. An unauthenticated attacker could use the credentials to access the WLAN service if the configuration file has been retrieved from the device by leveraging another known vulnerability.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-312

Affected software

No affected versions have been published.

Timeline

Published: Jan 17, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-45445.4The MashShare WordPress plugin before 3.8.7 does not validate and escape some of its shortcode attributes before outputting them back in the CVE-2022-454404.4A vulnerability exists in the FTP server of the Zyxel AX7501-B0 firmware prior to V5.17(ABPC.3)C0, which processes symbolic links on externa CVE-2022-454416.1A cross-site scripting (XSS) vulnerability in Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.13)C0, which could allow an attacker t CVE-2022-454428.8Sinatra is a domain-specific language for creating web applications in Ruby. An issue was discovered in Sinatra 2.0 before 2.2.3 and 3.0 bef CVE-2022-454449.8Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 contains hard-coded passwords for select use CVE-2022-454476.5M4 PDF plugin for Prestashop sites, in its 3.2.3 version and before, is vulnerable to a directory traversal vulnerability. The “f” parameter CVE-2022-454486.1M4 PDF plugin for Prestashop sites, in its 3.2.3 version and before, is vulnerable to an arbitrary HTML Document crafting vulnerability. The CVE-2022-454496.5Sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following products are affected: Acronis Cyber P CVE-2022-45455.4The Sitemap WordPress plugin before 4.4 does not validate and escape some of its shortcode attributes before outputting them back in the pag CVE-2022-454507.5Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Agent (Linux, CVE-2022-454517.8Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect CVE-2022-454527.8Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Agent (Windows) before build 304