OpenSSL RSA timing oracle (CVE-2022-4304)

Summary

A Bleichenbacher-style timing vulnerability exists in OpenSSL's RSA decryption.

Vulnerability ID	Vulnerability Overview
CVE-2022-4304	A timing side-channel during RSA decryption allows an attacker to send numerous trial ciphertexts to progressively recover the plaintext pre-master secret.

Affected Supported TeraStations

TS5010/3020/3010
Fixed in firmware version 6.12
 

Back to Security Notices

Date	Description
09/10/2026	Initial release

Back to Security Notices