CVE-2022-4616: Command Injection
The webserver in Delta DX-3021 versions prior to 1.24 is vulnerable to command injection through the network diagnosis page. This vulnerability could allow a remote unauthenticated user to add files, delete files, and change file permissions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Delta DX-3021to a version that resolves this vulnerability.Fixed in 1.24
Event History
Frequently Asked Questions
What is the severity of CVE-2022-4616?
The severity of CVE-2022-4616 is critical with a CVSS score of 9.1.
How can an attacker exploit CVE-2022-4616?
An attacker can exploit CVE-2022-4616 by performing command injection through the network diagnosis page.
What can a remote unauthenticated user do if they exploit CVE-2022-4616?
If a remote unauthenticated user exploits CVE-2022-4616, they can add files, delete files, and change file permissions.
What is the affected software version of CVE-2022-4616?
The affected software version of CVE-2022-4616 is Delta DX-3021 versions prior to 1.24.
How can I fix CVE-2022-4616?
To fix CVE-2022-4616, update to Delta DX-3021 version 1.24 or later.