CVE-2022-34757

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists where weak cipher suites can be used for the SSH connection between Easergy Pro software and the device, which may allow an attacker to observe protected communication details. Affected Products: Easergy P5 (V01.401.102 and prior)

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-327

Affected software

No affected versions have been published.

Timeline

Published
Jul 13, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-347584.9A CWE-20: Improper Input Validation vulnerability exists that could cause the device watchdog function to be disabled if the attacker had acCVE-2022-347597.5A CWE-787: Out-of-bounds Write vulnerability exists that could cause a denial of service of the webserver due to improper parsing of the HTTCVE-2022-347607.5A CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability exists that could cause a denial of service of the webserverCVE-2022-347617.5A CWE-476: NULL Pointer Dereference vulnerability exists that could cause a denial of service of the webserver when parsing JSON content typCVE-2022-347627.5A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause unauthorized CVE-2022-347637.5A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could cause loading of unauthorized firmware images due CVE-2022-347647.5A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause denial of service wCVE-2022-347655.3A CWE-73: External Control of File Name or Path vulnerability exists that could cause loading of unauthorized firmware images when user-contCVE-2022-347679.8Web page which "wizardpwd.asp" ALLNET Router model WR0500AC is prone to Authorization bypass vulnerability – the password, located at "adminCVE-2022-347687.5insert HTML / js code inside input how to get to the vulnerable input : Workers > worker nickname > inject in this input the code.CVE-2022-347695.5Michlol - rashim web interface Insecure direct object references (IDOR). First of all, the attacker needs to login. After he performs log inCVE-2022-34779.8The tagDiv Composer WordPress plugin before 3.5, required by the Newspaper WordPress theme before 12.1 and Newsmag WordPress theme before 5.
CVE-2022-34757: Medium severity, CVSS 5.3 | Vulnix