CVE-2022-32985: Nexans Gigaswitch 641 Desk v5 Sfp-Vi Firmware

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

libnx_apl.so on Nexans FTTO GigaSwitch before 6.02N and 7.x before 7.02 implements a Backdoor Account for SSH logins on port 50200 or 50201.

Affected products

• Nexans Gigaswitch 641 Desk v5 Sfp-Vi Firmware: before 6.02n (fixed in 6.02n); from 7.0, before 7.02 (fixed in 7.02)
• Nexans Gigaswitch 642 Desk v5 Sfp-2vi Firmware: before 6.02n (fixed in 6.02n); from 7.0, before 7.02 (fixed in 7.02)
• Nexans Gigaswitch v5 2tp(pd-F+) Sfp-Vi 54vdc Firmware: before 6.02n (fixed in 6.02n); from 7.0, before 7.02 (fixed in 7.02)
• Nexans Gigaswitch v5 2tp(pse+) Sfp-Vi 54vdc Firmware: before 6.02n (fixed in 6.02n); from 7.0, before 7.02 (fixed in 7.02)
• Nexans Gigaswitch v5 2tp Sfp-Vi 54vdc Firmware: before 6.02n (fixed in 6.02n); from 7.0, before 7.02 (fixed in 7.02)
• Nexans Gigaswitch v5 Sfp-2vi 230vac Firmware: before 6.02n (fixed in 6.02n); from 7.0, before 7.02 (fixed in 7.02)
• Nexans Gigaswitch v5 Tp(pse+) Sfp-2vi 54vdc Firmware: before 6.02n (fixed in 6.02n); from 7.0, before 7.02 (fixed in 7.02)
• Nexans Gigaswitch v5 Tp(pse+) Sfp-2vi 54vdc Ind Firmware: before 6.02n (fixed in 6.02n); from 7.0, before 7.02 (fixed in 7.02)
• Nexans Gigaswitch v5 Tp(pse+) Sfp-2vi 54vdc Med Firmware: before 6.02n (fixed in 6.02n); from 7.0, before 7.02 (fixed in 7.02)
• Nexans Gigaswitch v5 TP Sfp-2vi 54vdc Firmware: before 6.02n (fixed in 6.02n); from 7.0, before 7.02 (fixed in 7.02)
• Nexans Gigaswitch v5 TP Sfp-2vi 54vdc Ind Firmware: before 6.02n (fixed in 6.02n); from 7.0, before 7.02 (fixed in 7.02)
• Nexans Gigaswitch v5 TP Sfp-2vi 54vdc Med Firmware: before 6.02n (fixed in 6.02n); from 7.0, before 7.02 (fixed in 7.02)
• Nexans Gigaswitch v5 TP Sfp-Vi 230vac Firmware: before 6.02n (fixed in 6.02n); from 7.0, before 7.02 (fixed in 7.02)

Published 2022-07-17. Last modified 2026-06-17.