---
title: "Pharos response to OpenSSL 3.x vulnerability - November 2022"
slug: "pharos-response-to-openssl-3x-vulnerability"
updated: 2025-06-27T13:44:12Z
published: 2025-06-27T13:44:12Z
canonical: "kb.pharos.com/pharos-response-to-openssl-3x-vulnerability"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://kb.pharos.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Pharos response to OpenSSL 3.x vulnerability - November 2022

#### **Background**

Recently, two security vulnerabilities were discovered inside OpenSSL version 3.x

- CVE-2022-3786: [https://nvd.nist.gov/vuln/detail/CVE-2022-3786](https://nvd.nist.gov/vuln/detail/CVE-2022-3786)
- CVE-2022-3602: [https://nvd.nist.gov/vuln/detail/CVE-2022-3602](https://nvd.nist.gov/vuln/detail/CVE-2022-3602)

The vulnerability *3602 was initially believed to be “Critical” because it allows either DoS of the receiving server, or possible Remote Code Execution. The vulnerability *3786 was initially believed to be “Critical” because it allows DoS of the remote server. Both vulnerabilities have since been downgraded to “High” due to the complexity of implementation and that it was unlikely to permit RCE.

Many organizations, including Pharos customers, are urgently investigating where this tool is used and how to update/repair those instances.

#### **Pharos Software and OpenSSL**

Pharos has reviewed all our software, 3rd party tools/libraries, internal infrastructure and cloud infrastructure and can confirm that we are not susceptible to OpenSSL 3.x vulnerability.

## Related

- [Pharos Response to CVE-2021-44790 and CVE-2021-44224 - December 2021](/pharos-response-to-cve-2021-44790-and-cve-2021-44224.md)
- [Pharos Response to WebP Vulnerability - September 2023](/pharos-response-to-webp-vulnerability.md)
- [Pharos Response to PrintNightmare Vulnerability - September 2021](/pharos-response-to-printnightmare-vulnerability.md)
- [Pharos Beacon Update: December 2020 Release Notes](/pharos-beacon-update-december-2020-release-notes.md)