CVE-2022-34746
Insufficient Entropy (CWE-331)
Published: Sep 20, 2022 / Updated: 26mo ago
010
CVSS 5.9EPSS 0.07%Medium
CVE info copied to clipboard
An insufficient entropy vulnerability caused by the improper use of randomness sources with low entropy for RSA key pair generation was found in Zyxel GS1900 series firmware versions prior to V2.70. This vulnerability could allow an unauthenticated attacker to retrieve a private key by factoring the RSA modulus N in the certificate of the web administration interface.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Timeline
First Article
Feedly found the first article mentioning CVE-2022-34746. See article
Sep 20, 2022 at 1:57 AM / twitter.com
EPSS
EPSS Score was set to: 0.07% (Percentile: 30.2%)
Sep 18, 2023 at 8:49 PM
Affected Systems
Zyxel/gs1900-10hp_firmware
+null more
Patches
www.zyxel.com
+null more
Attack Patterns
CAPEC-59: Session Credential Falsification through Prediction
+null more
News
Live-Hack-CVE/CVE-2022-34746: An insufficient entropy vulnerability caused by the improper use of randomness ... - GitHub
Live-Hack-CVE/CVE-2022-34746: An insufficient entropy vulnerability caused by the improper use of randomness ... GitHub
Insufficient Entropy in Zyxel GS1900 series switches
A remote attacker can retrieve a private key. The vulnerability allows a remote attacker to gain access to sensitive information on the system.
CVE-2022-34746
- CVSS Scores & Vulnerability Types If the vulnerability is created recently it may take a few days to gather vulnerable products list and other information like cvss scores.
🚨 NEW: CVE-2022-34746 🚨 An insufficient entropy vulnerability caused by the improper use of randomness sources with low entropy for RSA key pair generation was found in Zyxel GS1900 series firmware versions prior t... (click for more) https://nvd.nist.gov/vuln/detail/CVE-2022-34746
🚨 NEW: CVE-2022-34746 🚨 An insufficient entropy vulnerability caused by the improper use of randomness sources with low entropy for RSA key pair generation was found in Zyxel GS1900 series firmware versions prior t... (click for more) nvd.nist.gov/vuln/detail/CVE…
🚨 NEW: CVE-2022-34746 🚨 An insufficient entropy vulnerability caused by the improper use of randomness sources with low entropy for RSA key pair generation was found in Zyxel GS1900 series firmware versions prior t... (click for more) https://nvd.nist.gov/vuln/detail/CVE-2022-34746
🚨 NEW: CVE-2022-34746 🚨 An insufficient entropy vulnerability caused by the improper use of randomness sources with low entropy for RSA key pair generation was found in Zyxel GS1900 series firmware versions prior t... (click for more) nvd.nist.gov/vuln/detail/CVE…
See 12 more articles and social media posts