high7.2
CVE-2022-4616
The webserver in Delta DX-3021 versions prior to 1.24 is vulnerable to command injection through the network diagnosis page.
Impact
The webserver in Delta DX-3021 versions prior to 1.24 is vulnerable to command injection through the network diagnosis page. This vulnerability could allow a remote unauthenticated user to add files, delete files, and change file permissions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Deltaww | Dx-3021l9 Firmware | before 1.24 |
Weakness classification
References
- NVD record
- CVE.org record
- https://downloadcenter.deltaww.com/en-US/DownloadCenter?v=1&CID=06&itemID=060308&downloadID=DX&dataType=12&sort_expr=cdate&sort_dir=DESC
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-354-05
- https://downloadcenter.deltaww.com/en-US/DownloadCenter?v=1&CID=06&itemID=060308&downloadID=DX&dataType=12&sort_expr=cdate&sort_dir=DESC
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-354-05