CVE-2022-34757CWE-327

A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists where weak cipher suites can be used for the SSH connection between Easergy…

Medium · published July 13, 2022

CVSS v3.1
6.7
EPSS
0%
Percentile
25.1
In the wild
Unconfirmed
What it is

A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists where weak cipher suites can be used for the SSH connection between Easergy Pro software and the device, which may allow an attacker to observe protected communication details. Affected Products: Easergy P5 (V01.401.102 and prior)

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00332 · 25.1th percentile
Weakness
CWE-327 · Use of a Broken or Risky Cryptographic Algorithm
Published
2022-07-13T21:10Z
EPSS history
Timeline
  • 13 JUL 21:10Z
    A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists where weak cipher suites can be used for the SSH connection between Easergy…
    cvelistv5