CVE-2025-53842
- State
- Published
- Severity
- 6.8 Medium
- Published
- Jul 16, 2025
- Updated
- Jul 18, 2025
- Reserved
- Jul 10, 2025
Description
Use of hard-coded credentials issue exists in ZWX-2000CSW2-HN prior to 0.3.19 and ZWX-2000CS2-HN firmware all versions. If this vulnerability is exploited, an attacker may tamper with the settings of the device by obtaining the credentials. This vulnerability is caused by an insufficient fix for CVE-2024-39838.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.8 Medium | CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N | jpcert |
| 3.0 | 4.5 Medium | CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N | jpcert |
Weaknesses
- CWE-798 Use of hard-coded credentials
Affected Products
| Product | Versions |
|---|---|
ZWX-2000CSW2-HNZEXELON CO., LTD. |
|
ZWX-2000CS2-HNZEXELON CO., LTD. |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.