CVE-2022-32985

Published: Jul 17, 2022Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

libnx_apl.so on Nexans FTTO GigaSwitch before 6.02N and 7.x before 7.02 implements a Backdoor Account for SSH logins on port 50200 or 50201.

Affected (26)

Nexans

13 products

Gigaswitch 641 Desk V5 Sfp Vi Firmware

Gigaswitch 642 Desk V5 Sfp 2vi Firmware

Gigaswitch V5 2tp(pd F+) Sfp Vi 54vdc Firmware

Gigaswitch V5 2tp(pse+) Sfp Vi 54vdc Firmware

Gigaswitch V5 2tp Sfp Vi 54vdc Firmware

Gigaswitch V5 Sfp 2vi 230vac Firmware

Gigaswitch V5 Tp(pse+) Sfp 2vi 54vdc Firmware

Gigaswitch V5 Tp(pse+) Sfp 2vi 54vdc Ind Firmware

Gigaswitch V5 Tp(pse+) Sfp 2vi 54vdc Med Firmware

Gigaswitch V5 Tp Sfp 2vi 54vdc Firmware

Gigaswitch V5 Tp Sfp 2vi 54vdc Ind Firmware

Gigaswitch V5 Tp Sfp 2vi 54vdc Med Firmware

Gigaswitch V5 Tp Sfp Vi 230vac Firmware

Configuration A

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nexans Gigaswitch 641 Desk V5 Sfp Vi Firmware	Before 6.02n
Nexans Gigaswitch 641 Desk V5 Sfp Vi Firmware	From 7.0 to 7.02

Running on/with	Platform Versions
Nexans Gigaswitch 641 Desk V5 Sfp Vi	All versions

Configuration B

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nexans Gigaswitch 642 Desk V5 Sfp 2vi Firmware	Before 6.02n
Nexans Gigaswitch 642 Desk V5 Sfp 2vi Firmware	From 7.0 to 7.02

Running on/with	Platform Versions
Nexans Gigaswitch 642 Desk V5 Sfp 2vi	All versions

Configuration C

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nexans Gigaswitch V5 2tp(pd F+) Sfp Vi 54vdc Firmware	Before 6.02n
Nexans Gigaswitch V5 2tp(pd F+) Sfp Vi 54vdc Firmware	From 7.0 to 7.02

Running on/with	Platform Versions
Nexans Gigaswitch V5 2tp(pd F+) Sfp Vi 54vdc	All versions

Configuration D

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nexans Gigaswitch V5 2tp(pse+) Sfp Vi 54vdc Firmware	Before 6.02n
Nexans Gigaswitch V5 2tp(pse+) Sfp Vi 54vdc Firmware	From 7.0 to 7.02

Running on/with	Platform Versions
Nexans Gigaswitch V5 2tp(pse+) Sfp Vi 54vdc	All versions

Configuration E

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nexans Gigaswitch V5 2tp Sfp Vi 54vdc Firmware	Before 6.02n
Nexans Gigaswitch V5 2tp Sfp Vi 54vdc Firmware	From 7.0 to 7.02

Running on/with	Platform Versions
Nexans Gigaswitch V5 2tp Sfp Vi 54vdc	All versions

Configuration F

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nexans Gigaswitch V5 Sfp 2vi 230vac Firmware	Before 6.02n
Nexans Gigaswitch V5 Sfp 2vi 230vac Firmware	From 7.0 to 7.02

Running on/with	Platform Versions
Nexans Gigaswitch V5 Sfp 2vi 230vac	All versions

Configuration G

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nexans Gigaswitch V5 Tp(pse+) Sfp 2vi 54vdc Firmware	Before 6.02n
Nexans Gigaswitch V5 Tp(pse+) Sfp 2vi 54vdc Firmware	From 7.0 to 7.02

Running on/with	Platform Versions
Nexans Gigaswitch V5 Tp(pse+) Sfp 2vi 54vdc	All versions

Configuration H

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nexans Gigaswitch V5 Tp(pse+) Sfp 2vi 54vdc Ind Firmware	Before 6.02n
Nexans Gigaswitch V5 Tp(pse+) Sfp 2vi 54vdc Ind Firmware	From 7.0 to 7.02

Running on/with	Platform Versions
Nexans Gigaswitch V5 Tp(pse+) Sfp 2vi 54vdc Ind	All versions

Configuration I

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nexans Gigaswitch V5 Tp(pse+) Sfp 2vi 54vdc Med Firmware	Before 6.02n
Nexans Gigaswitch V5 Tp(pse+) Sfp 2vi 54vdc Med Firmware	From 7.0 to 7.02

Running on/with	Platform Versions
Nexans Gigaswitch V5 Tp(pse+) Sfp 2vi 54vdc Med	All versions

Configuration J

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nexans Gigaswitch V5 Tp Sfp 2vi 54vdc Firmware	Before 6.02n
Nexans Gigaswitch V5 Tp Sfp 2vi 54vdc Firmware	From 7.0 to 7.02

Running on/with	Platform Versions
Nexans Gigaswitch V5 Tp Sfp 2vi 54vdc	All versions

Configuration K

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nexans Gigaswitch V5 Tp Sfp 2vi 54vdc Ind Firmware	Before 6.02n
Nexans Gigaswitch V5 Tp Sfp 2vi 54vdc Ind Firmware	From 7.0 to 7.02

Running on/with	Platform Versions
Nexans Gigaswitch V5 Tp Sfp 2vi 54vdc Ind	All versions

Configuration L

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nexans Gigaswitch V5 Tp Sfp 2vi 54vdc Med Firmware	Before 6.02n
Nexans Gigaswitch V5 Tp Sfp 2vi 54vdc Med Firmware	From 7.0 to 7.02

Running on/with	Platform Versions
Nexans Gigaswitch V5 Tp Sfp 2vi 54vdc Med	All versions

Configuration M

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nexans Gigaswitch V5 Tp Sfp Vi 230vac Firmware	Before 6.02n
Nexans Gigaswitch V5 Tp Sfp Vi 230vac Firmware	From 7.0 to 7.02

Running on/with	Platform Versions
Nexans Gigaswitch V5 Tp Sfp Vi 230vac	All versions

Related CWEs

CWE-798

Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

References (4)

https://sec-consult.com/vulnerability-lab/advisory/hardcoded-backdoor-user-outdated-software-components-nexans-ftto-gigaswitch/

Source: cve@mitre.org

ExploitThird Party Advisory

https://www.nexans.de/de/products/Data-Network-Solutions/Industrial-and-office-switches.html

Source: cve@mitre.org

Vendor Advisory

https://sec-consult.com/vulnerability-lab/advisory/hardcoded-backdoor-user-outdated-software-components-nexans-ftto-gigaswitch/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://www.nexans.de/de/products/Data-Network-Solutions/Industrial-and-office-switches.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.