Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: ZEXELON CO., LTD. Component: Zwx-2000csw2-hn Firmware Clear all filters
TI-2024-27779 CVE-2024-41720 · GHSA-q2mq-qmgr-3266

Incorrect permission assignment in ZEXELON CO., LTD. ZWX-2000CSW2-HN

Priority LOW 34

Incorrect permission assignment for critical resource issue exists in ZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15, which may allow a network-adjacent authenticated attacker to alter the configuration of the dev…

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00238 Published 2024-08-05 No fix listed CWE-732
TI-2024-26751 CVE-2024-39838 · GHSA-3v7c-xw2c-76j5

Hard-coded credentials in ZEXELON CO., LTD. ZWX-2000CSW2-HN

Priority LOW 38

ZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15 uses hard-coded credentials, which may allow a network-adjacent attacker with an administrative privilege to alter the configuration of the device.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00332 Published 2024-08-05 No fix listed CWE-798