What’s Vulnerable › Vulnerabilities

CVE-2022-32985

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-07-17 · updated 2026-06-17
• Weakness: CWE-798

Description

libnx_apl.so on Nexans FTTO GigaSwitch before 6.02N and 7.x before 7.02 implements a Backdoor Account for SSH logins on port 50200 or 50201.

Affected products

• Nexans Gigaswitch 641 Desk V5 Sfp-Vi Firmware: before 6.02n; from 7.0 before 7.02 — fixed in 6.02n, 7.02
• Nexans Gigaswitch 642 Desk V5 Sfp-2Vi Firmware: before 6.02n; from 7.0 before 7.02 — fixed in 6.02n, 7.02
• Nexans Gigaswitch V5 2Tp(Pd-F+) Sfp-Vi 54Vdc Firmware: before 6.02n; from 7.0 before 7.02 — fixed in 6.02n, 7.02
• Nexans Gigaswitch V5 2Tp(Pse+) Sfp-Vi 54Vdc Firmware: before 6.02n; from 7.0 before 7.02 — fixed in 6.02n, 7.02
• Nexans Gigaswitch V5 2Tp Sfp-Vi 54Vdc Firmware: before 6.02n; from 7.0 before 7.02 — fixed in 6.02n, 7.02
• Nexans Gigaswitch V5 Sfp-2Vi 230Vac Firmware: before 6.02n; from 7.0 before 7.02 — fixed in 6.02n, 7.02
• Nexans Gigaswitch V5 Tp(Pse+) Sfp-2Vi 54Vdc Firmware: before 6.02n; from 7.0 before 7.02 — fixed in 6.02n, 7.02
• Nexans Gigaswitch V5 Tp(Pse+) Sfp-2Vi 54Vdc Ind Firmware: before 6.02n; from 7.0 before 7.02 — fixed in 6.02n, 7.02
• Nexans Gigaswitch V5 Tp(Pse+) Sfp-2Vi 54Vdc Med Firmware: before 6.02n; from 7.0 before 7.02 — fixed in 6.02n, 7.02
• Nexans Gigaswitch V5 Tp Sfp-2Vi 54Vdc Firmware: before 6.02n; from 7.0 before 7.02 — fixed in 6.02n, 7.02
• Nexans Gigaswitch V5 Tp Sfp-2Vi 54Vdc Ind Firmware: before 6.02n; from 7.0 before 7.02 — fixed in 6.02n, 7.02
• Nexans Gigaswitch V5 Tp Sfp-2Vi 54Vdc Med Firmware: before 6.02n; from 7.0 before 7.02 — fixed in 6.02n, 7.02
• Nexans Gigaswitch V5 Tp Sfp-Vi 230Vac Firmware: before 6.02n; from 7.0 before 7.02 — fixed in 6.02n, 7.02

How to fix

Upgrade to a fixed version: Nexans Gigaswitch 641 Desk V5 Sfp-Vi Firmware 6.02n, 7.02; Nexans Gigaswitch 642 Desk V5 Sfp-2Vi Firmware 6.02n, 7.02; Nexans Gigaswitch V5 2Tp(Pd-F+) Sfp-Vi 54Vdc Firmware 6.02n, 7.02; Nexans Gigaswitch V5 2Tp(Pse+) Sfp-Vi 54Vdc Firmware 6.02n, 7.02; Nexans Gigaswitch V5 2Tp Sfp-Vi 54Vdc Firmware 6.02n, 7.02; Nexans Gigaswitch V5 Sfp-2Vi 230Vac Firmware 6.02n, 7.02; Nexans Gigaswitch V5 Tp(Pse+) Sfp-2Vi 54Vdc Firmware 6.02n, 7.02; Nexans Gigaswitch V5 Tp(Pse+) Sfp-2Vi 54Vdc Ind Firmware 6.02n, 7.02; Nexans Gigaswitch V5 Tp(Pse+) Sfp-2Vi 54Vdc Med Firmware 6.02n, 7.02; Nexans Gigaswitch V5 Tp Sfp-2Vi 54Vdc Firmware 6.02n, 7.02; Nexans Gigaswitch V5 Tp Sfp-2Vi 54Vdc Ind Firmware 6.02n, 7.02; Nexans Gigaswitch V5 Tp Sfp-2Vi 54Vdc Med Firmware 6.02n, 7.02. Check the vendor advisory for mitigations.

References

• https://sec-consult.com/vulnerability-lab/advisory/hardcoded-backdoor-user-outdated-software-components-nexans-ftto-gigaswitch/
• https://www.nexans.de/de/products/Data-Network-Solutions/Industrial-and-office-switches.html
• https://sec-consult.com/vulnerability-lab/advisory/hardcoded-backdoor-user-outdated-software-components-nexans-ftto-gigaswitch/
• https://www.nexans.de/de/products/Data-Network-Solutions/Industrial-and-office-switches.html

Get alerted when CVE-2022-32985 or the next vulnerability affects your stack