OpenSSL infinite loop DoS (CVE-2022-0778)

Summary

A malformed certificate can throw OpenSSL into an infinite loop, freezing the application.

Vulnerability ID	Vulnerability Overview
CVE-2022-0778	Parsing a maliciously crafted elliptic curve within a certificate triggers an infinite loop in the BN_mod_sqrt() function, leading to a 100% CPU denial of service.

Affected Supported TeraStations

TS5010/3020/3010
Fixed in firmware version 6.12
 

Back to Security Notices

Date	Description
09/10/2026	Initial release

Back to Security Notices