CVE-2022-4616: Deltaww Dx-3021l9 Firmware

Critical severity, CVSS 9.1. EPSS: 4.8% chance of exploitation in the next 30 days.

The webserver in Delta DX-3021 versions prior to 1.24 is vulnerable to command injection through the network diagnosis page. This vulnerability could allow a remote unauthenticated user to add files, delete files, and change file permissions.

Affected products

• Deltaww Dx-3021l9 Firmware: before 1.24 (fixed in 1.24)

Published 2023-01-13. Last modified 2026-06-17.