What is CVE-2022-34746?

CVE-2022-34746 is a medium-severity vulnerability in Zyxel Gs1900-10hp, classified under Insufficient Entropy. CVSS score: 5.9/10. Published 2022-09-20.

How severe is CVE-2022-34746?

Medium severity. CVSS v3 base score is 5.9 out of 10.

Vulnerability in Zyxel Gs1900-10hp

CVE-2022-34746

An insufficient entropy vulnerability caused by the improper use of randomness sources with low entropy for RSA key pair generation was found in Zyxel GS1900 series firmware versions prior to V2.70. This vulnerability could allow an unauth…

EPSS: 0.003 (24.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Zyxel Gs1900-10hp
Zyxel Gs1900-10hp_firmware
Zyxel Gs1900-16
Zyxel Gs1900-16_firmware
Zyxel Gs1900-24
Zyxel Gs1900-24e
Zyxel Gs1900-24e_firmware
Zyxel Gs1900-24ep
Zyxel Gs1900-24ep_firmware
Zyxel Gs1900-24_firmware

Weakness classification (CWE)

CWE-331 — Insufficient Entropy

References

security@zyxel.com.tw (x_refsource_CONFIRM, Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2022-34746?: CVE-2022-34746 is a medium-severity vulnerability in Zyxel Gs1900-10hp, classified under Insufficient Entropy. CVSS score: 5.9/10. Published 2022-09-20.
How severe is CVE-2022-34746?: Medium severity. CVSS v3 base score is 5.9 out of 10.