{"id":"CVE-2022-1292","title":"The c_rehash script does not properly sanitise shell metacharacters to prevent command injection","summary":"The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker…","severity":"high","cvss":7.3,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-78"],"vendor":"siemens","product":"brownfield_connectivity_gateway","affected":["brownfield_connectivity_gateway < 2.15","openssl >= 1.0.2, < 1.0.2ze","openssl >= 1.1.1, < 1.1.1o","openssl >= 3.0.0, < 3.0.3","debian_linux = 9.0","debian_linux = 10.0","debian_linux = 11.0","active_iq_unified_manager","clustered_data_ontap","clustered_data_ontap_antivirus_connector","oncommand_insight","oncommand_workflow_automation","santricity_smi-s_provider","smi-s_provider","snapcenter","snapmanager","solidfire,_enterprise_sds_&_hci_storage_node","solidfire_&_hci_management_node","a700s_firmware","h300s_firmware","h500s_firmware","h700s_firmware","h300e_firmware","h500e_firmware","h700e_firmware","h410s_firmware","aff_8300_firmware","fas_8300_firmware","aff_8700_firmware","fas_8700_firmware","aff_a400_firmware","fabric-attached_storage_a400_firmware","a250_firmware","aff_500f_firmware","fas_500f_firmware","enterprise_manager_ops_center = 12.4.0.0","mysql_server >= 5.0.0, <= 5.7.38","mysql_server >= 8.0.0, <= 8.0.29","mysql_workbench <= 8.0.29","fedora = 35","fedora = 36"],"patched":["brownfield_connectivity_gateway 2.15","openssl 3.0.3"],"published":"2022-05-03","updated":"2026-10-14","sourceUpdated":"2026-10-14T13:17:18.103","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2022-1292","references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf","label":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2","label":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=548d3f280a6e737673f5b61fce24bb100108dfeb","label":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23","label":"openssl-security@openssl.org"},{"url":"https://lists.debian.org/debian-lts-announce/2022/05/msg00019.html","label":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VX4KWHPMKYJL6ZLW4M5IU7E5UV5ZWJQU/","label":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNU5M7BXMML26G3GPYKFGQYPQDRSNKDD/","label":"openssl-security@openssl.org"},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0011","label":"openssl-security@openssl.org"},{"url":"https://security.gentoo.org/glsa/202210-02","label":"openssl-security@openssl.org"},{"url":"https://security.netapp.com/advisory/ntap-20220602-0009/","label":"openssl-security@openssl.org"},{"url":"https://security.netapp.com/advisory/ntap-20220729-0004/","label":"openssl-security@openssl.org"},{"url":"https://www.debian.org/security/2022/dsa-5139","label":"openssl-security@openssl.org"},{"url":"https://www.openssl.org/news/secadv/20220503.txt","label":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","label":"openssl-security@openssl.org"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=548d3f280a6e737673f5b61fce24bb100108dfeb","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://gitlab.com/fraf0/cve-2022-1292-re_score-analysis","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2022/05/msg00019.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VX4KWHPMKYJL6ZLW4M5IU7E5UV5ZWJQU/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNU5M7BXMML26G3GPYKFGQYPQDRSNKDD/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0011","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202210-02","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20220602-0009/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20220729-0004/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2022/dsa-5139","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20220503.txt","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-146325.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-419740.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-942865.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-953464.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"tags":["nvd","exploit-available","cve.org","score-dispute"],"epss":0.82612,"epssPercentile":0.99664,"exploits":{"github":5,"githubRepos":["https://github.com/li8u99/CVE-2022-1292","https://github.com/alcaparra/CVE-2022-1292","https://github.com/rama291041610/CVE-2022-1292"],"checkedAt":"2026-10-15T15:38:13.471Z"},"exploitAvailable":true,"ingestedAt":"2026-10-14T13:30:58.410Z","ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"total","timestamp":"2023-07-21T00:00:00+00:00"},"scores":{"nvd":7.3,"adp":9.8},"slug":"CVE-2022-1292","body":"## Overview\n\nThe c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).\n\n## Affected\n\n- `brownfield_connectivity_gateway < 2.15`\n- `openssl >= 1.0.2, < 1.0.2ze`\n- `openssl >= 1.1.1, < 1.1.1o`\n- `openssl >= 3.0.0, < 3.0.3`\n- `debian_linux = 9.0`\n- `debian_linux = 10.0`\n- `debian_linux = 11.0`\n- `active_iq_unified_manager`\n- `clustered_data_ontap`\n- `clustered_data_ontap_antivirus_connector`\n- `oncommand_insight`\n- `oncommand_workflow_automation`\n- `santricity_smi-s_provider`\n- `smi-s_provider`\n- `snapcenter`\n- `snapmanager`\n- `solidfire,_enterprise_sds_&_hci_storage_node`\n- `solidfire_&_hci_management_node`\n- `a700s_firmware`\n- `h300s_firmware`\n- `h500s_firmware`\n- `h700s_firmware`\n- `h300e_firmware`\n- `h500e_firmware`\n- `h700e_firmware`\n- `h410s_firmware`\n- `aff_8300_firmware`\n- `fas_8300_firmware`\n- `aff_8700_firmware`\n- `fas_8700_firmware`\n- `aff_a400_firmware`\n- `fabric-attached_storage_a400_firmware`\n- `a250_firmware`\n- `aff_500f_firmware`\n- `fas_500f_firmware`\n- `enterprise_manager_ops_center = 12.4.0.0`\n- `mysql_server >= 5.0.0, <= 5.7.38`\n- `mysql_server >= 8.0.0, <= 8.0.29`\n- `mysql_workbench <= 8.0.29`\n- `fedora = 35`\n- `fedora = 36`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `brownfield_connectivity_gateway 2.15`\n- `openssl 3.0.3`","depth":"midnight","depthScore":69,"depthScoreParts":{"impact":40.2,"likelihood":16.5,"exploitation":12,"ransomware":0},"changes":[]}