CVE-2022-40735
highPriorität · verfolgen · 31EPSS 0.026 · 85. PerzentilDEEUUSEPSS · bewertet 2026-10-27
The Diffie-Hellman Key Agreement Protocol allows use of long exponents that arguably make certain calculations unnecessarily expensive, because the 1996 van Oorschot and Wiener paper found that "(appropriately) short exponents" can be used when there are adequate subgroup constraints, and these short exponents can lead to less expensive calculations than for long exponents. This issue is different from CVE-2002-20001 because it is based on an observation about exponent size, rather than an observation about numbers that are not public keys. The specific situations in which calculation expense would constitute a server-side vulnerability depend on the protocol (e.g., TLS, SSH, or IKE) and the DHE implementation details. In general, there might be an availability concern because of server-side resource consumption from DHE modular-exponentiation calculations. Finally, it is possible for an attacker to exploit this vulnerability and CVE-2002-20001 together.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.
- Mitigationpepperl_fuchs_psirt
External protective measures are required: Disable the webserver after configuration, if possible, by following these steps: - Enable SSH via the web server. - Login to the SSH server. - Disable the webserver via SSH portal. - Reboot the device. or: - Use HTTPS rather than HTTP while using the webserver. - Minimize network exposure for affected products and ensure that they are not accessible via the Internet. - Isolate affected products from the corporate network. - If remote access is required, use secure methods such as virtual private networks(VPNs). Pepperl+Fuchs will provide an update to address some of these vulnerabilities in the future.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.9–7.5
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (19)
Betroffene Produkte und Versionsbereiche.
- diffie-hellman key exchange project diffie-hellman key exchangealle VersionennvdUScpe:2.3:a:diffie-hellman_key_exchange_project:diffie-hellman_key_exchange:*:*:*:*:*:*:*:*
- Firmware <= 1.6.50 installed on ICE2-8IOL-G65L-V1Dalle Versionenpepperl_fuchs_psirtDEcpe:2.3:o:pepperl_fuchs:ICE2_8IOL_G65L_V1D_firmware:1.6.50:*:*:*:*:*:*:*
- Firmware <= 1.6.50 installed on ICE2-8IOL-K45P-RJ45alle Versionenpepperl_fuchs_psirtDEcpe:2.3:o:pepperl_fuchs:ICE2_8IOL_K45P_RJ45_firmware:1.6.50:*:*:*:*:*:*:*
- Firmware <= 1.6.50 installed on ICE2-8IOL-K45S-RJ45alle Versionenpepperl_fuchs_psirtDEcpe:2.3:o:pepperl_fuchs:ICE2_8IOL_K45S_RJ45_firmware:1.6.50:*:*:*:*:*:*:*
- Firmware <= 1.6.50 installed on ICE2-8IOL1-G65L-V1Dalle Versionenpepperl_fuchs_psirtDEcpe:2.3:o:pepperl_fuchs:ICE2_8IOL1_G65L_V1D_firmware:1.6.50:*:*:*:*:*:*:*
- Firmware <= 1.6.50 installed on ICE3-8IOL-G65L-V1Dalle Versionenpepperl_fuchs_psirtDEcpe:2.3:o:pepperl_fuchs:ICE3_8IOL_G65L_V1D_firmware:1.6.50:*:*:*:*:*:*:*
- Firmware <= 1.6.50 installed on ICE3-8IOL-G65L-V1D-Yalle Versionenpepperl_fuchs_psirtDEcpe:2.3:o:pepperl_fuchs:ICE3_8IOL_G65L_V1D_Y_firmware:1.6.50:*:*:*:*:*:*:*
- Firmware <= 1.6.50 installed on ICE3-8IOL-K45P-RJ45alle Versionenpepperl_fuchs_psirtDEcpe:2.3:o:pepperl_fuchs:ICE3_8IOL_K45P_RJ45_firmware:1.6.50:*:*:*:*:*:*:*
- Firmware <= 1.6.50 installed on ICE3-8IOL-K45S-RJ45alle Versionenpepperl_fuchs_psirtDEcpe:2.3:o:pepperl_fuchs:ICE3_8IOL_K45S_RJ45_firmware:1.6.50:*:*:*:*:*:*:*
- Firmware <= 1.6.50 installed on ICE3-8IOL1-G65L-V1Dalle Versionenpepperl_fuchs_psirtDEcpe:2.3:o:pepperl_fuchs:ICE3_8IOL1_G65L_V1D_firmware:1.6.50:*:*:*:*:*:*:*
Advisories (3)
Hersteller- und Ökosystem-Meldungen dazu.
- VDE-2024-017Pepperl+Fuchs: ICE2- * and ICE3- * are affected by multiple vulnerabilities2024-04-10csaf · pepperl_fuchs_psirtDE
Critical vulnerabilities have been discovered in the product due to outdated software components.The impact of the vulnerabilities on the affected device may result in Denial of service Bypassing of authentication Information disclosure
- WID-SEC-W-2023-1886Sophos Unified Threat Management (UTM) Software: Mehrere SchwachstellenDeutsch2023-07-25csaf · cert_bundDE
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Sophos Unified Threat Management (UTM) Software ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial of Service Zustand herbeizuführen.
- WID-SEC-W-2024-3056Diffie-Hellman Implementierungen: Mehrere Schwachstellen ermöglichen Denial of ServiceDeutsch2024-09-30csaf · cert_bundDE
Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Diffie-Hellman Implementierungen ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (37)
Externe Belege — Patches, Meldungen, Analysen.
- https://cxsecurity.com/cveshow/CVE-2022-40735/cnnvd
- https://gist.github.com/c0r0n3r/9455ddcab985c50fd1912eabf26e058bcnnvd
- https://github.com/mozilla/ssl-config-generator/issues/162cnnvd
- https://link.springer.com/content/pdf/10.1007/3-540-68339-9_29.pdfcnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2022-40735cnnvd
- https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-57pt1r5.pdfcnnvd
- https://raw.githubusercontent.com/CVEProject/cvelist/9d7fbbcabd3f44cfedc9e8807757d31ece85a2c6/2022/40xxx/CVE-2022-40735.jsoncnnvd
- https://www.auscert.org.au/bulletins/ESB-2024.0084cnnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan