CVE-2022-42140: OS Command Injection
Published Dec 13, 2022
·Updated
Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Command Injection via lform/netdiagnose.
Affected Software
5 affected components
Delta Electronics DX-2100-L1-CN=1.5.0.10
Deltaww Dx-2100-l1-cn Firmware=1.5.0.10
Deltaww Dx-2100-l1-cn
All of the following
Deltaww Dx-2100-l1-cn Firmware=1.5.0.10
Deltaww Dx-2100-l1-cn
Event History
Dec 13, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Dec 14, 2022
Data Sourced
via NVD·12:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-42140?
The severity of CVE-2022-42140 is high with a severity value of 7.2.
2
How does Delta Electronics DX-2100-L1-CN 2.42 become vulnerable to Command Injection?
Delta Electronics DX-2100-L1-CN 2.42 becomes vulnerable to Command Injection via lform/net_diagnose.
3
Which software versions of Delta Electronics DX-2100-L1-CN are affected by CVE-2022-42140?
The affected software version of Delta Electronics DX-2100-L1-CN is 1.5.0.10.
4
Is Delta Electronics DX-2100-L1-CN currently vulnerable to CVE-2022-42140?
Yes, Delta Electronics DX-2100-L1-CN is currently vulnerable to CVE-2022-42140.
5
How can I fix the Command Injection vulnerability in Delta Electronics DX-2100-L1-CN 2.42?
To fix the Command Injection vulnerability in Delta Electronics DX-2100-L1-CN 2.42, update to a non-vulnerable version or apply the necessary patches from the vendor.