CVE-2025-53842CWE-798

Use of hard-coded credentials issue exists in ZWX-2000CSW2-HN prior to 0.3.19 and ZWX-2000CS2-HN firmware all versions

Medium · published July 16, 2025

CVSS v4.0
6.8
EPSS
0%
Percentile
12.9
In the wild
Unconfirmed
What it is

Use of hard-coded credentials issue exists in ZWX-2000CSW2-HN prior to 0.3.19 and ZWX-2000CS2-HN firmware all versions. If this vulnerability is exploited, an attacker may tamper with the settings of the device by obtaining the credentials. This vulnerability is caused by an insufficient fix for CVE-2024-39838.

The record
Technical detail
CVSS v4.0
6.8 · MEDIUM
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00229 · 12.9th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2025-07-16T04:30Z
EPSS history
Timeline
  • 16 JUL 04:30Z
    Use of hard-coded credentials issue exists in ZWX-2000CSW2-HN prior to 0.3.19 and ZWX-2000CS2-HN firmware all versions
    cvelistv5