https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 13:34:51 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-14416 EUVD-2026-14416 https://cve.radiocsirt.org/vuln/euvd-2026-14416 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25218 <p>The use of the RSA algorithm without OAEP, or any other padding scheme, in telnetd_startup, allows an unauthenticated attacker on the local area network to achieve a significant degree of control over the &#34;plaintext&#34; to which an arbitrary blob of ciphertext will be decrypted by OpenSSL&#39;s RSA_public_decrypt() function. This weakness allows the attacker to manipulate the various iterations of the telnetd startup state machine and eventually obtain a root shell on the device, by means of an exchange of crafted UDP packets. In all versions but K2 22.5.9.163 and K3C 32.1.15.93 a successful attack also requires the exploitation of a null-byte interaction error (CVE-2022-25219).</p> <p>The use of the RSA algorithm without OAEP, or any other padding scheme, in telnetd_startup, allows an unauthenticated attacker on the local area network to achieve a significant degree of control over the &#34;plaintext&#34; to which an arbitrary blob of ciphertext will be decrypted by OpenSSL&#39;s RSA_public_decrypt() function. This weakness allows the attacker to manipulate the various iterations of the telnetd startup state machine and eventually obtain a root shell on the device, by means of an exchange of crafted UDP packets. In all versions but K2 22.5.9.163 and K3C 32.1.15.93 a successful attack also requires the exploitation of a null-byte interaction error (CVE-2022-25219).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-25218 https://cve.radiocsirt.org/vuln/ghsa-j9f3-j4r5-j83v <p>The use of the RSA algorithm without OAEP, or any other padding scheme, in telnetd_startup, allows an unauthenticated attacker on the local area network to achieve a significant degree of control over the &#34;plaintext&#34; to which an arbitrary blob of ciphertext will be decrypted by OpenSSL&#39;s RSA_public_decrypt() function. This weakness allows the attacker to manipulate the various iterations of the telnetd startup state machine and eventually obtain a root shell on the device, by means of an exchange of crafted UDP packets. In all versions but K2 22.5.9.163 and K3C 32.1.15.93 a successful attack also requires the exploitation of a null-byte interaction error (CVE-2022-25219).</p> <p>The use of the RSA algorithm without OAEP, or any other padding scheme, in telnetd_startup, allows an unauthenticated attacker on the local area network to achieve a significant degree of control over the &#34;plaintext&#34; to which an arbitrary blob of ciphertext will be decrypted by OpenSSL&#39;s RSA_public_decrypt() function. This weakness allows the attacker to manipulate the various iterations of the telnetd startup state machine and eventually obtain a root shell on the device, by means of an exchange of crafted UDP packets. In all versions but K2 22.5.9.163 and K3C 32.1.15.93 a successful attack also requires the exploitation of a null-byte interaction error (CVE-2022-25219).</p> https://cve.radiocsirt.org/vuln/ghsa-j9f3-j4r5-j83v https://cve.radiocsirt.org/vuln/gsd-2022-25218 gsd-2022-25218 https://cve.radiocsirt.org/vuln/gsd-2022-25218