{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"4G Router DX-3021","vendor":"Delta Industrial Automation","versions":[{"lessThan":"1.24","status":"affected","version":"0","versionType":"custom"}]}],"source":"ics-cert@hq.dhs.gov"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:deltaww:dx-3021l9_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"FE9D63E6-9AD8-4E4B-BE77-B0116D2AD0AF","versionEndExcluding":"1.24","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:deltaww:dx-3021l9:-:*:*:*:*:*:*:*","matchCriteriaId":"B25CBB1D-AF0B-4DC2-B36F-3EC1640BD6AE","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The webserver in Delta DX-3021 versions prior to 1.24 is vulnerable to \ncommand injection through the network diagnosis page. This vulnerability\n could allow a remote unauthenticated user to add files, delete files, \nand change file permissions.\n\n"},{"lang":"es","value":"El servidor web en las versiones Delta DX-3021 anteriores a la 1.24 es vulnerable a la inyección de comandos a través de la página de diagnóstico de red. Esta vulnerabilidad podría permitir que un usuario remoto no autenticado agregue archivos, elimine archivos y cambie los permisos de los archivos."}],"id":"CVE-2022-4616","lastModified":"2026-06-17T05:21:21.513","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.2,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.2,"impactScore":5.9,"source":"ics-cert@hq.dhs.gov","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.2,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2022-4616","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-01-16T20:32:39.715403Z","version":"2.0.3"}}]},"published":"2023-01-13T00:15:09.733","references":[{"source":"ics-cert@hq.dhs.gov","tags":["Product","Vendor Advisory"],"url":"https://downloadcenter.deltaww.com/en-US/DownloadCenter?v=1&CID=06&itemID=060308&downloadID=DX&dataType=12&sort_expr=cdate&sort_dir=DESC"},{"source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"],"url":"https://www.cisa.gov/uscert/ics/advisories/icsa-22-354-05"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product","Vendor Advisory"],"url":"https://downloadcenter.deltaww.com/en-US/DownloadCenter?v=1&CID=06&itemID=060308&downloadID=DX&dataType=12&sort_expr=cdate&sort_dir=DESC"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"],"url":"https://www.cisa.gov/uscert/ics/advisories/icsa-22-354-05"}],"sourceIdentifier":"ics-cert@hq.dhs.gov","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-77"}],"source":"ics-cert@hq.dhs.gov","type":"Secondary"}]}