Severity
High
Analysis Summary
CVE-2022- 4616
Delta Electronics DX-3021L9 could allow a remote authenticated attacker to execute arbitrary commands on the system, caused by a command injection vulnerability in the network diagnosis page. An attacker could exploit this vulnerability to execute arbitrary commands on the system, add files, delete files, and change file permissions.
Impact
- Command Execution
Indicators Of Compromise
CVE
- CVE-2022- 4616
Affected Vendors
Delta Electronics
Affected Products
- Delta Electronics DX-3021 1.22
- Delta Electronics DX-3021 1.23
Remediation
Refer to CISA-CERT Advisory for the patch, upgrade, or suggested workaround information.