[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLSpeuIiaOh94h1nKjfmowcu7iiBIsgz9zwCrg0p3qj4":3,"g5a-risk:CVE-2022-36158":185},{"success":4,"data":5,"meta":182},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":36,"epssPercentile":26,"epssTimeSeries":37,"severity":38,"affectedProducts":39,"affectedProductsCount":12,"references":67,"referencesCount":12,"weaknesses":98,"weaknessesCount":107,"isActivelyExploited":108,"cisaInfo":26,"otxData":26,"relatedBlogPosts":109,"seoMetadata":110,"configurations":135,"relatedVendorCves":180,"notableEvents":181},"CVE-2022-36158","What is CVE-2022-36158?","Contec FXA3200 version 1.13.00 and under suffers from Insecure Permissions in the Wireless LAN Manager interface which allows malicious actors to execute Linux commands with root privilege via a hidden web page (\u002Fusr\u002Fwww\u002Fja\u002Fmnt_cmd.cgi).","Contec FXA3200 version 1.13.00 and under suffers from Insecure Permissions in the Wireless LAN Manager interface which allows malicious actors to execute Lin...","2022-09-26T11:15:09.483","2025-05-21T16:15:26.243",8,"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","ADJACENT_NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.1,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":35,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":34,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",8.8,2.8,0.01567,[36,36,36,36,36,36,36],"High",[40,45,49,52,55,58,61,64],{"vendor":41,"product":42,"version":43,"criteria":44,"vulnerable":4},"contec","fxa3000_firmware","*","cpe:2.3:o:contec:fxa3000_firmware:*:*:*:*:*:*:*:*",{"vendor":41,"product":46,"version":47,"criteria":48,"vulnerable":4},"fxa3000","-","cpe:2.3:h:contec:fxa3000:-:*:*:*:*:*:*:*",{"vendor":41,"product":50,"version":43,"criteria":51,"vulnerable":4},"fxa3020_firmware","cpe:2.3:o:contec:fxa3020_firmware:*:*:*:*:*:*:*:*",{"vendor":41,"product":53,"version":47,"criteria":54,"vulnerable":4},"fxa3020","cpe:2.3:h:contec:fxa3020:-:*:*:*:*:*:*:*",{"vendor":41,"product":56,"version":43,"criteria":57,"vulnerable":4},"fxa3200_firmware","cpe:2.3:o:contec:fxa3200_firmware:*:*:*:*:*:*:*:*",{"vendor":41,"product":59,"version":47,"criteria":60,"vulnerable":4},"fxa3200","cpe:2.3:h:contec:fxa3200:-:*:*:*:*:*:*:*",{"vendor":41,"product":62,"version":43,"criteria":63,"vulnerable":4},"fxa2000_firmware","cpe:2.3:o:contec:fxa2000_firmware:*:*:*:*:*:*:*:*",{"vendor":41,"product":65,"version":47,"criteria":66,"vulnerable":4},"fxa2000","cpe:2.3:h:contec:fxa2000:-:*:*:*:*:*:*:*",[68,74,79,85,90,92,94,96],{"url":69,"source":70,"tags":71},"https:\u002F\u002Fgist.github.com\u002FNwqda\u002Faac33d1936d2b514a3268f145345abb4","GitHub",[72,73],"Broken Link","Third Party Advisory",{"url":75,"source":76,"tags":77},"https:\u002F\u002Fjvn.jp\u002Fen\u002Fvu\u002FJVNVU98305100\u002F","Jvn",[78,73],"Patch",{"url":80,"source":81,"tags":82},"https:\u002F\u002Fsamy.link\u002Fblog\u002Fcontec-flexlan-fxa2000-and-fxa3000-series-vulnerability-repo","Samy",[83,84,73],"Exploit","Mitigation",{"url":86,"source":87,"tags":88},"https:\u002F\u002Fwww.contec.com\u002Fproducts-services\u002Fcomputer-networking\u002Fflexlan-fx\u002Ffx-accesspoint\u002Ffxa3200\u002Ffeature\u002F#section","Contec",[89],"Product",{"url":69,"source":70,"tags":91},[72,73],{"url":75,"source":76,"tags":93},[78,73],{"url":80,"source":81,"tags":95},[83,84,73],{"url":86,"source":87,"tags":97},[89],[99],{"id":100,"name":101,"description":102,"extendedDescription":103,"status":104,"abstraction":105,"structure":106},"CWE-425","Direct Request ('Forced Browsing')","The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.","Web applications susceptible to direct request attacks often make the false assumption that such resources can only be reached through a given navigation path and so only apply authorization at certain points in the path.","Incomplete","Base","Simple",1,false,[],{"title":111,"metaDescription":112,"keywords":113,"canonicalUrl":114,"structuredData":115},"What is CVE-2022-36158? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-36158, a high severity cyber security vulnerability from 2022. Contec FXA3200 version 1.13.00 and under suffers from Insec...","CVE-2022-36158, CVE-2022-36158 vulnerability, CVE-2022-36158 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, contec security, fxa3000_firmware vulnerability, fxa3000 vulnerability, fxa3020_firmware vulnerability, fxa3020 vulnerability, fxa3200_firmware vulnerability","\u002Fwhat-is\u002Fcve-2022-36158",{"@context":116,"@type":117,"headline":111,"description":112,"datePublished":10,"dateModified":11,"author":118,"publisher":122,"about":126,"mainEntityOfPage":130,"articleSection":133,"keywords":134},"https:\u002F\u002Fschema.org","TechArticle",{"@type":119,"name":120,"url":121},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":119,"name":120,"url":121,"logo":123},{"@type":124,"url":125},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":127,"name":6,"description":128,"additionalType":129},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":131,"@id":132},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-36158","Cybersecurity","CVE-2022-36158, CVE-2022-36158 vulnerability, CVE-2022-36158 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[136,149,159,169],{"Operator":137,"Negate":26,"Nodes":138},"AND",[139,145],{"Operator":140,"Negate":26,"CPEMatch":141},"OR",[142],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":143,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":144},"6E67687B-F390-444A-8E80-250763681261","1.13.00",{"Operator":140,"Negate":26,"CPEMatch":146},[147],{"Vulnerable":26,"Criteria":48,"MatchCriteriaID":148,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"9AB86C4B-366E-4560-94A9-9821C2CCC5C2",{"Operator":137,"Negate":26,"Nodes":150},[151,155],{"Operator":140,"Negate":26,"CPEMatch":152},[153],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":154,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":144},"2BBBCFC0-97C2-4777-B49D-D010E8094774",{"Operator":140,"Negate":26,"CPEMatch":156},[157],{"Vulnerable":26,"Criteria":54,"MatchCriteriaID":158,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"8ECA2469-3831-4AF5-B3C8-A5958AF2900C",{"Operator":137,"Negate":26,"Nodes":160},[161,165],{"Operator":140,"Negate":26,"CPEMatch":162},[163],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":164,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":144},"E38C56EE-4B13-4ADC-BCD4-D7FD4F077ED5",{"Operator":140,"Negate":26,"CPEMatch":166},[167],{"Vulnerable":26,"Criteria":60,"MatchCriteriaID":168,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"20886C6B-D3B4-438D-BBAF-F80AEE3B8762",{"Operator":137,"Negate":26,"Nodes":170},[171,176],{"Operator":140,"Negate":26,"CPEMatch":172},[173],{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":174,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":175,"VersionEndIncluding":26},"DA3E66D5-3D23-49C9-8920-7D96ACEFA96F","1.39.00",{"Operator":140,"Negate":26,"CPEMatch":177},[178],{"Vulnerable":26,"Criteria":66,"MatchCriteriaID":179,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B4A09AF9-472E-4FC0-A490-EF21EB37D47C",[],[],{"lastModified":11,"cacheTime":183,"version":184},1792240657951,"2.0",{"score":186,"band":187,"action":188,"scoredAt":189},48,"Medium","Plan remediation","2026-10-16T06:55:48.081308+00:00"]