CVE-2022-4616CWE-77

The webserver in Delta DX-3021 versions prior to 1.24 is vulnerable to command injection through the network diagnosis page

High · published January 12, 2023

CVSS v3.1
7.2
EPSS
5%
Percentile
91.9
In the wild
Unconfirmed
What it is

The webserver in Delta DX-3021 versions prior to 1.24 is vulnerable to

command injection through the network diagnosis page. This vulnerability

could allow a remote unauthenticated user to add files, delete files,

and change file permissions.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.04757 · 91.9th percentile
Weakness
CWE-77 · Improper Neutralization of Special Elements used in a Command ('Command Injection')
Published
2023-01-12T23:54Z
EPSS history
Timeline
  • 12 JAN 23:54Z
    The webserver in Delta DX-3021 versions prior to 1.24 is vulnerable to command injection through the network diagnosis page
    cvelistv5