CVE-2022-4616

Published: Jan 13, 2023Modified: Jun 17, 2026

9.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Exploitability: 3.9 / Impact: 5.2

Source: NVD

Description

The webserver in Delta DX-3021 versions prior to 1.24 is vulnerable to command injection through the network diagnosis page. This vulnerability could allow a remote unauthenticated user to add files, delete files, and change file permissions.

Affected (1)

Products: Deltaww: Dx 3021l9 Firmware

Deltaww

1 product

Dx 3021l9 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Deltaww Dx 3021l9 Firmware	Before 1.24

Running on/with	Platform Versions
Deltaww Dx 3021l9	All versions

Related CWEs

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

References (4)

https://downloadcenter.deltaww.com/en-US/DownloadCenter?v=1&CID=06&itemID=060308&downloadID=DX&dataType=12&sort_expr=cdate&sort_dir=DESC

Source: ics-cert@hq.dhs.gov

ProductVendor Advisory

https://www.cisa.gov/uscert/ics/advisories/icsa-22-354-05

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://downloadcenter.deltaww.com/en-US/DownloadCenter?v=1&CID=06&itemID=060308&downloadID=DX&dataType=12&sort_expr=cdate&sort_dir=DESC

Source: af854a3a-2127-422b-91ae-364da2661108

ProductVendor Advisory

https://www.cisa.gov/uscert/ics/advisories/icsa-22-354-05

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.