CVE-2022-36159

CVE-2022-36159 concerns a hardcoded, weak hash password for the root user in the /etc/shadow file of Contec FXA3200 (v1.13 and earlier) and related FXA series devices. This vulnerability allows an unauthenticated attacker on the adjacent network to easily crack the password and gain full control of the Wireless LAN Manager interface, enabling actions like sniffing traffic or injecting malware. While rated High severity (CVSS 8.8) due to its critical impact on confidentiality, integrity, and availability, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion beyond a single mention and article.