CVE-2022-46392
MediumCVSS 5.3Summary
W Mbed TLS przed wersją 2.28.2 oraz 3.x przed wersją 3.3.0 odkryto problem, który pozwala atakującemu na odzyskanie prywatnego klucza RSA po zaobserwowaniu jednego działania z użyciem klucza prywatnego. Warunkiem jest, aby rozmiar okna (MBEDTLS_MPI_WINDOW_SIZE) używanego do eksponentacji wynosił 3 lub mniej.
Risk Assessment
Atakujący z dostępem do wystarczających informacji o dostępach do pamięci może zagrażać bezpieczeństwu kluczy prywatnych, co może prowadzić do kompromitacji danych i systemów zabezpieczających.
Recommendation
Zaleca się aktualizację Mbed TLS do wersji 2.28.2 lub 3.3.0 oraz zwiększenie rozmiaru okna eksponentacji powyżej 3, aby zminimalizować ryzyko związane z tą podatnością.
Related vulnerabilities
- CVE-2026-42417Critical
Unauthenticated SQL Injection vulnerability in ARMember Premium versions up to 7.8. An attacker without authentication can manipulate database queries.
- CVE-2026-42415Critical
Unauthenticated SQL Injection vulnerability in Porto Theme - Functionality versions up to 3.9.3. An attacker can execute unauthorized database queries.
- CVE-2026-41555Critical
Unauthenticated SQL Injection vulnerability in Newsletter Subscription Form – User Subscriptions Form, Capture Email versions up to 1.5.9. An attacker can inject malicious SQL queries.
- CVE-2026-39797Critical
Unauthenticated PHP Object Injection vulnerability in GDPR Framework By Data443 versions up to 2.5.0. An attacker can inject malicious PHP objects, potentially leading to code execution.
- CVE-2026-39795Critical
Unauthenticated SQL Injection vulnerability in SendPress Newsletters versions up to 1.26.1.20. An attacker can perform unauthorized database operations.
- CVE-2026-39785Critical
Unauthenticated SQL Injection vulnerability in Gmedia Photo Gallery versions up to 1.25.1. An attacker can manipulate SQL queries without authentication.
- CVE-2026-39773Critical
Unauthenticated Privilege Escalation vulnerability in Doctreat Core versions up to 1.7.0. An attacker without authentication can gain elevated privileges.
- CVE-2026-39770Critical
Unauthenticated Arbitrary File Upload vulnerability in Doctreat versions up to 1.7.0. An attacker can upload malicious files without authentication.
- CVE-2026-39764Critical
Unauthenticated SQL Injection vulnerability in Radius Booking — Booking Calendar for Appointments & Services versions up to 1.0.19. An attacker can inject SQL queries.
- CVE-2026-39761Critical
Unauthenticated Privilege Escalation vulnerability in Meta Box AIO versions up to 3.7.1. An attacker without authentication can gain higher privileges.
Original NVD description (English source)
An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access to precise enough information about memory accesses (typically, an untrusted operating system attacking a secure enclave) can recover an RSA private key after observing the victim performing a single private-key operation, if the window size (MBEDTLS_MPI_WINDOW_SIZE) used for the exponentiation is 3 or smaller.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS