CVE-2026-22317 | THREATINT

Description

A command injection vulnerability in the device’s Root CA certificate transfer workflow allows a high-privileged attacker to send crafted HTTP POST requests that result in arbitrary command execution on the underlying Linux OS with root privileges.

PUBLISHED Reserved 2026-01-07 | Published 2026-03-18 | Updated 2026-03-18 | Assigner CERTVDE

HIGH: 7.2CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Problem types

CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')

Product status

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Default status

unaffected

0.0.0 (semver) before 3.53

affected

Credits

Gabriele Quagliarella from Nozomi Networks finder

References

certvde.com/de/advisories/VDE-2025-104

cve.org (CVE-2026-22317)

nvd.nist.gov (CVE-2026-22317)

Download JSON