Hard-coded credentials in ZWX-2000CSW2-HN firmware may allow unauthorized access

CVE-2024-39838

What is CVE-2024-39838?

The Zexelon ZWX-2000CSW2-HN firmware prior to version 0.3.15 is susceptible to a vulnerability that enables a network-adjacent attacker with administrative access to modify the device's configuration settings. This flaw arises from the use of hard-coded credentials within the firmware, potentially undermining device integrity and security. Users of the affected firmware should consider applying updates and reviewing their security posture to mitigate risks associated with unauthorized configuration changes.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References