A vulnerability, which was classified as critical, was found in Nexans FTTO GigaSwitch. Affected is an unknown function of the file libnx_apl.so of the component SSH Service. The manipulation with an unknown input leads to a backdoor vulnerability. CWE is classifying the issue as CWE-912. The product contains functionality that is not documented, not part of the specification, and not accessible through an interface or command sequence that is obvious to the product's users or administrators. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

libnx_apl.so on Nexans FTTO GigaSwitch before 6.02N and 7.x before 7.02 implements a Backdoor Account for SSH logins on port 50200 or 50201.

The weakness was presented 07/18/2022. The advisory is available at sec-consult.com. This vulnerability is traded as CVE-2022-32985 since 06/10/2022. Technical details are known, but there is no available exploit. This vulnerability is assigned to T1588.001 by the MITRE ATT&CK project.

Upgrading to version 6.02N or 7.02 eliminates this vulnerability.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• Nexans

Name

• FTTO GigaSwitch

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion