ByteOS Network

NVD Vulnerability Details :

CVE-2025-53842

Awaiting Analysis

Source-vultures@jpcert.or.jp

Published At-16 Jul, 2025 | 05:15

Updated At-16 Jul, 2025 | 14:58

Use of hard-coded credentials issue exists in ZWX-2000CSW2-HN prior to 0.3.19 and ZWX-2000CS2-HN firmware all versions. If this vulnerability is exploited, an attacker may tamper with the settings of the device by obtaining the credentials. This vulnerability is caused by an insufficient fix for CVE-2024-39838.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	6.8	MEDIUM	CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Secondary	3.0	4.5	MEDIUM	CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weaknesses

CWE ID	Type	Source
CWE-798	Primary	vultures@jpcert.or.jp

References

Hyperlink	Source	Resource
https://jvn.jp/en/jp/JVN44419726/	vultures@jpcert.or.jp	N/A
https://www.cve.org/CVERecord?id=CVE-2024-39838	vultures@jpcert.or.jp	N/A
https://zexelon.co.jp/pdf/jvn44419726.pdf	vultures@jpcert.or.jp	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History