CVE-2022-40222: Siretta Quartz-Gold Firmware

Critical severity, CVSS 9.8. EPSS: 4.3% chance of exploitation in the next 30 days.

An OS command injection vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger this vulnerability.

Affected products

• Siretta Quartz-Gold Firmware: version g5.0.1.5-210720-141020 only

Published 2023-01-26. Last modified 2026-06-17.