CVE-2022-34746
- State
- Published
- Severity
- 5.9 Medium
- Published
- Sep 20, 2022
- Updated
- May 29, 2025
- Reserved
- Jun 28, 2022
Description
An insufficient entropy vulnerability caused by the improper use of randomness sources with low entropy for RSA key pair generation was found in Zyxel GS1900 series firmware versions prior to V2.70. This vulnerability could allow an unauthenticated attacker to retrieve a private key by factoring the RSA modulus N in the certificate of the web administration interface.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.9 Medium | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N | Zyxel |
Weaknesses
- CWE-331 Insufficient Entropy
Affected Products
| Product | Versions |
|---|---|
Zyxel GS1900 series firmwareZyxel |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.