CVE-2022-40735
highpriority · track · 31EPSS 0.026 · 85 %ileDEEUUSEPSS · scored 2026-10-27
The Diffie-Hellman Key Agreement Protocol allows use of long exponents that arguably make certain calculations unnecessarily expensive, because the 1996 van Oorschot and Wiener paper found that "(appropriately) short exponents" can be used when there are adequate subgroup constraints, and these short exponents can lead to less expensive calculations than for long exponents. This issue is different from CVE-2002-20001 because it is based on an observation about exponent size, rather than an observation about numbers that are not public keys. The specific situations in which calculation expense would constitute a server-side vulnerability depend on the protocol (e.g., TLS, SSH, or IKE) and the DHE implementation details. In general, there might be an availability concern because of server-side resource consumption from DHE modular-exponentiation calculations. Finally, it is possible for an attacker to exploit this vulnerability and CVE-2002-20001 together.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
No vendor fix yet; a mitigation is available.
- Mitigationpepperl_fuchs_psirt
External protective measures are required: Disable the webserver after configuration, if possible, by following these steps: - Enable SSH via the web server. - Login to the SSH server. - Disable the webserver via SSH portal. - Reboot the device. or: - Use HTTPS rather than HTTP while using the webserver. - Minimize network exposure for affected products and ensure that they are not accessible via the Internet. - Isolate affected products from the corporate network. - If remote access is required, use secure methods such as virtual private networks(VPNs). Pepperl+Fuchs will provide an update to address some of these vulnerabilities in the future.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.9–7.5
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (19)
Products and version ranges known to be affected.
- diffie-hellman key exchange project diffie-hellman key exchangeall versionsnvdUScpe:2.3:a:diffie-hellman_key_exchange_project:diffie-hellman_key_exchange:*:*:*:*:*:*:*:*
- Firmware <= 1.6.50 installed on ICE2-8IOL-G65L-V1Dall versionspepperl_fuchs_psirtDEcpe:2.3:o:pepperl_fuchs:ICE2_8IOL_G65L_V1D_firmware:1.6.50:*:*:*:*:*:*:*
- Firmware <= 1.6.50 installed on ICE2-8IOL-K45P-RJ45all versionspepperl_fuchs_psirtDEcpe:2.3:o:pepperl_fuchs:ICE2_8IOL_K45P_RJ45_firmware:1.6.50:*:*:*:*:*:*:*
- Firmware <= 1.6.50 installed on ICE2-8IOL-K45S-RJ45all versionspepperl_fuchs_psirtDEcpe:2.3:o:pepperl_fuchs:ICE2_8IOL_K45S_RJ45_firmware:1.6.50:*:*:*:*:*:*:*
- Firmware <= 1.6.50 installed on ICE2-8IOL1-G65L-V1Dall versionspepperl_fuchs_psirtDEcpe:2.3:o:pepperl_fuchs:ICE2_8IOL1_G65L_V1D_firmware:1.6.50:*:*:*:*:*:*:*
- Firmware <= 1.6.50 installed on ICE3-8IOL-G65L-V1Dall versionspepperl_fuchs_psirtDEcpe:2.3:o:pepperl_fuchs:ICE3_8IOL_G65L_V1D_firmware:1.6.50:*:*:*:*:*:*:*
- Firmware <= 1.6.50 installed on ICE3-8IOL-G65L-V1D-Yall versionspepperl_fuchs_psirtDEcpe:2.3:o:pepperl_fuchs:ICE3_8IOL_G65L_V1D_Y_firmware:1.6.50:*:*:*:*:*:*:*
- Firmware <= 1.6.50 installed on ICE3-8IOL-K45P-RJ45all versionspepperl_fuchs_psirtDEcpe:2.3:o:pepperl_fuchs:ICE3_8IOL_K45P_RJ45_firmware:1.6.50:*:*:*:*:*:*:*
- Firmware <= 1.6.50 installed on ICE3-8IOL-K45S-RJ45all versionspepperl_fuchs_psirtDEcpe:2.3:o:pepperl_fuchs:ICE3_8IOL_K45S_RJ45_firmware:1.6.50:*:*:*:*:*:*:*
- Firmware <= 1.6.50 installed on ICE3-8IOL1-G65L-V1Dall versionspepperl_fuchs_psirtDEcpe:2.3:o:pepperl_fuchs:ICE3_8IOL1_G65L_V1D_firmware:1.6.50:*:*:*:*:*:*:*
advisories (3)
Vendor and ecosystem advisories describing this.
- VDE-2024-017Pepperl+Fuchs: ICE2- * and ICE3- * are affected by multiple vulnerabilities2024-04-10csaf · pepperl_fuchs_psirtDE
Critical vulnerabilities have been discovered in the product due to outdated software components.The impact of the vulnerabilities on the affected device may result in Denial of service Bypassing of authentication Information disclosure
- WID-SEC-W-2023-1886Sophos Unified Threat Management (UTM) Software: Mehrere SchwachstellenDeutsch2023-07-25csaf · cert_bundDE
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Sophos Unified Threat Management (UTM) Software ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial of Service Zustand herbeizuführen.
- WID-SEC-W-2024-3056Diffie-Hellman Implementierungen: Mehrere Schwachstellen ermöglichen Denial of ServiceDeutsch2024-09-30csaf · cert_bundDE
Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Diffie-Hellman Implementierungen ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (37)
External citations — patches, advisories, analysis.
- https://cxsecurity.com/cveshow/CVE-2022-40735/cnnvd
- https://gist.github.com/c0r0n3r/9455ddcab985c50fd1912eabf26e058bcnnvd
- https://github.com/mozilla/ssl-config-generator/issues/162cnnvd
- https://link.springer.com/content/pdf/10.1007/3-540-68339-9_29.pdfcnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2022-40735cnnvd
- https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-57pt1r5.pdfcnnvd
- https://raw.githubusercontent.com/CVEProject/cvelist/9d7fbbcabd3f44cfedc9e8807757d31ece85a2c6/2022/40xxx/CVE-2022-40735.jsoncnnvd
- https://www.auscert.org.au/bulletins/ESB-2024.0084cnnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan