Medium severity6.5NVD Advisory· Published Jan 17, 2023· Updated Jun 17, 2026

CVE-2022-45439

Description

A pair of spare WiFi credentials is stored in the configuration file of the Zyxel AX7501-B0 firmware prior to V5.17(ABPC.3)C0 in cleartext. An unauthenticated attacker could use the credentials to access the WLAN service if the configuration file has been retrieved from the device by leveraging another known vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zyxel/Ax7501 B0 Firmware2 versions
cpe:2.3:o:zyxel:ax7501-b0_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:zyxel:ax7501-b0_firmware:*:*:*:*:*:*:*:*range: <5.17\(abpc.3\)c0
- (no CPE)range: < V5.17(ABPC.3)C0
Zyxel/AX7501-B0llm-fuzzy
Range: <V5.17(ABPC.3)C0

Patches

Vulnerability mechanics

References

www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-cleartext-storage-of-wifi-credentials-and-improper-symbolic-links-of-ftp-for-ax7501-b0-cpenvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000