High · 8.8 CVE-2024-39838 EUVD-2024-38260GHSA-3v7c-xw2c-76j5

ZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15 uses hard-coded credentials, which may allow a network-adjacent attacker with an admi…

Published Aug 5, 2024 · Updated Mar 25, 2025 · Assigned by jpcert

Vendor: ZEXELON Product: ZWX-2000CSW2-HN

Description

ZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15 uses hard-coded credentials, which may allow a network-adjacent attacker with an administrative privilege to alter the configuration of the device.

Affected products

Vendor	Product	Affected	Fixed
ZEXELON	ZWX-2000CSW2-HN	firmware versions prior to Ver.0.3.15	—

References

https://www.zexelon.co.jp/pdf/jvn70666401.pdf
https://jvn.jp/en/jp/JVN70666401/