CVE-2022-42140

Name of the Vulnerable Software and Affected Versions Delta Electronics DX-2100-L1-CN version 2.42

Description The issue exists due to the lack of neutralization of special elements used in the operating system command by the lform/net diagnose component of the Delta Electronics DX-2100-L1-CN router's firmware. This can allow a remote attacker to execute arbitrary commands.

Recommendations For Delta Electronics DX-2100-L1-CN version 2.42, as a temporary workaround, consider disabling the lform/net diagnose component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.