CVE-2022-32985
high-risk
Published 2022-07-17
libnx_apl.so on Nexans FTTO GigaSwitch before 6.02N and 7.x before 7.02 implements a Backdoor Account for SSH logins on port 50200 or 50201.
Do I need to act?
-
0.61% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10
Critical
NETWORK
/ LOW complexity
Affected Products (13)
Gigaswitch 641 Desk V5 Sfp-Vi Firmware
Gigaswitch 642 Desk V5 Sfp-2Vi Firmware
Gigaswitch V5 2Tp\(Pd-F\+\) Sfp-Vi 54Vdc Firmware
Gigaswitch V5 2Tp\(Pse\+\) Sfp-Vi 54Vdc Firmware
Gigaswitch V5 2Tp Sfp-Vi 54Vdc Firmware
Gigaswitch V5 Sfp-2Vi 230Vac Firmware
Gigaswitch V5 Tp\(Pse\+\) Sfp-2Vi 54Vdc Firmware
Gigaswitch V5 Tp\(Pse\+\) Sfp-2Vi 54Vdc Ind Firmware
Gigaswitch V5 Tp\(Pse\+\) Sfp-2Vi 54Vdc Med Firmware
Gigaswitch V5 Tp Sfp-2Vi 54Vdc Firmware
Gigaswitch V5 Tp Sfp-2Vi 54Vdc Ind Firmware
Gigaswitch V5 Tp Sfp-2Vi 54Vdc Med Firmware
Gigaswitch V5 Tp Sfp-Vi 230Vac Firmware
Affected Vendors
References (4)
51
/ 100
high-risk
Severity
32/34 · Critical
Exploitability
2/34 · Minimal
Exposure
17/34 · Moderate