Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: ZEXELON CO., LTD. Clear all filters
TI-2025-33734 CVE-2025-53842 · GHSA-8f24-hh72-5gf6

Hard-coded credentials in ZEXELON CO., LTD. ZWX-2000CSW2-HN

Priority LOW 29

Use of hard-coded credentials issue exists in ZWX-2000CSW2-HN prior to 0.3.19 and ZWX-2000CS2-HN firmware all versions.

CVSS 4.0MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00229 Published 2025-07-16 Fixed in 0.3.19 CWE-798
TI-2024-27779 CVE-2024-41720 · GHSA-q2mq-qmgr-3266

Incorrect permission assignment in ZEXELON CO., LTD. ZWX-2000CSW2-HN

Priority LOW 34

Incorrect permission assignment for critical resource issue exists in ZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15, which may allow a network-adjacent authenticated attacker to alter the configuration of the dev…

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00238 Published 2024-08-05 No fix listed CWE-732
TI-2024-26751 CVE-2024-39838 · GHSA-3v7c-xw2c-76j5

Hard-coded credentials in ZEXELON CO., LTD. ZWX-2000CSW2-HN

Priority LOW 38

ZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15 uses hard-coded credentials, which may allow a network-adjacent attacker with an administrative privilege to alter the configuration of the device.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00332 Published 2024-08-05 No fix listed CWE-798