High severity8.0NVD Advisory· Published Sep 26, 2022· Updated Jun 17, 2026

CVE-2022-36158

Description

Contec FXA3200 version 1.13.00 and under suffers from Insecure Permissions in the Wireless LAN Manager interface which allows malicious actors to execute Linux commands with root privilege via a hidden web page (/usr/www/ja/mnt_cmd.cgi).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Contec Co., Ltd./FXA3200llm-fuzzy
Range: <=1.13.00
Contec Co., Ltd./FLEXLAN FX Access Pointllm-create
Range: <=1.13.00
Contec/FXA3200description
Contec Co., Ltd./Fxa3000 Firmware
cpe:2.3:o:contec:fxa3000_firmware:*:*:*:*:*:*:*:*
Range: <=1.13.00
Contec Co., Ltd./Fxa3020 Firmware
cpe:2.3:o:contec:fxa3020_firmware:*:*:*:*:*:*:*:*
Range: <=1.13.00
Contec Co., Ltd./Fxa3200 Firmware
cpe:2.3:o:contec:fxa3200_firmware:*:*:*:*:*:*:*:*
Range: <=1.13.00
Contec Co., Ltd./Fxa2000 Firmware
cpe:2.3:o:contec:fxa2000_firmware:*:*:*:*:*:*:*:*
Range: <1.39.00

Patches

Vulnerability mechanics

References

jvn.jp/en/vu/JVNVU98305100/nvdPatchThird Party Advisory
samy.link/blog/contec-flexlan-fxa2000-and-fxa3000-series-vulnerability-reponvdExploitMitigationThird Party Advisory
gist.github.com/Nwqda/aac33d1936d2b514a3268f145345abb4nvdBroken LinkThird Party Advisory
www.contec.com/products-services/computer-networking/flexlan-fx/fx-accesspoint/fxa3200/feature/nvdProduct

News mentions

No linked articles in our index yet.

cvss	0.520
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000