critical9.8
CVE-2022-32985
libnx_apl.so on Nexans FTTO GigaSwitch before 6.02N and 7.x before 7.02 implements a Backdoor Account for SSH logins on port 50200 or 50201.
Impact
libnx_apl.so on Nexans FTTO GigaSwitch before 6.02N and 7.x before 7.02 implements a Backdoor Account for SSH logins on port 50200 or 50201.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nexans | Gigaswitch 641 Desk V5 Sfp-Vi Firmware | before 6.02n from 7.0 before 7.02 |
| Nexans | Gigaswitch 642 Desk V5 Sfp-2vi Firmware | before 6.02n from 7.0 before 7.02 |
| Nexans | Gigaswitch V5 2tp\(Pd-F\+\) Sfp-Vi 54vdc Firmware | before 6.02n from 7.0 before 7.02 |
| Nexans | Gigaswitch V5 2tp\(Pse\+\) Sfp-Vi 54vdc Firmware | before 6.02n from 7.0 before 7.02 |
| Nexans | Gigaswitch V5 2tp Sfp-Vi 54vdc Firmware | before 6.02n from 7.0 before 7.02 |
| Nexans | Gigaswitch V5 Sfp-2vi 230vac Firmware | before 6.02n from 7.0 before 7.02 |
| Nexans | Gigaswitch V5 Tp\(Pse\+\) Sfp-2vi 54vdc Firmware | before 6.02n from 7.0 before 7.02 |
| Nexans | Gigaswitch V5 Tp\(Pse\+\) Sfp-2vi 54vdc Ind Firmware | before 6.02n from 7.0 before 7.02 |
| Nexans | Gigaswitch V5 Tp\(Pse\+\) Sfp-2vi 54vdc Med Firmware | before 6.02n from 7.0 before 7.02 |
| Nexans | Gigaswitch V5 Tp Sfp-2vi 54vdc Firmware | before 6.02n from 7.0 before 7.02 |
| Nexans | Gigaswitch V5 Tp Sfp-2vi 54vdc Ind Firmware | before 6.02n from 7.0 before 7.02 |
| Nexans | Gigaswitch V5 Tp Sfp-2vi 54vdc Med Firmware | before 6.02n from 7.0 before 7.02 |
Weakness classification
References
- NVD record
- CVE.org record
- https://sec-consult.com/vulnerability-lab/advisory/hardcoded-backdoor-user-outdated-software-components-nexans-ftto-gigaswitch/
- https://www.nexans.de/de/products/Data-Network-Solutions/Industrial-and-office-switches.html
- https://sec-consult.com/vulnerability-lab/advisory/hardcoded-backdoor-user-outdated-software-components-nexans-ftto-gigaswitch/
- https://www.nexans.de/de/products/Data-Network-Solutions/Industrial-and-office-switches.html