CVE-2022-32985

PoC —

CVSS 3.1

9.8 critical

EPSS

1%p67

Published

Jul 17, 2022 (Jul 17, 2022)

Modified

Jun 17, 2026

Description

libnx_apl.so on Nexans FTTO GigaSwitch before 6.02N and 7.x before 7.02 implements a Backdoor Account for SSH logins on port 50200 or 50201.

Vendors: nexans
Products: gigaswitch 641 desk v5 sfp-vi firmware, gigaswitch 642 desk v5 sfp-2vi firmware, gigaswitch v5 2tp\(pd-f\+\) sfp-vi 54vdc firmware, gigaswitch v5 2tp\(pse\+\) sfp-vi 54vdc firmware, gigaswitch v5 2tp sfp-vi 54vdc firmware, gigaswitch v5 sfp-2vi 230vac firmware, gigaswitch v5 tp\(pse\+\) sfp-2vi 54vdc firmware, gigaswitch v5 tp\(pse\+\) sfp-2vi 54vdc ind firmware, gigaswitch v5 tp\(pse\+\) sfp-2vi 54vdc med firmware, gigaswitch v5 tp sfp-2vi 54vdc firmware, gigaswitch v5 tp sfp-2vi 54vdc ind firmware, gigaswitch v5 tp sfp-2vi 54vdc med firmware
Weakness: CWE-798
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.