--- id: CVE-2022-1292 title: >- The c_rehash script does not properly sanitise shell metacharacters to prevent command injection summary: >- The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker… severity: high cvss: 7.3 cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H' cwe: - CWE-78 - CWE-78 vendor: siemens product: brownfield_connectivity_gateway affected: - brownfield_connectivity_gateway < 2.15 - 'openssl >= 1.0.2, < 1.0.2ze' - 'openssl >= 1.1.1, < 1.1.1o' - 'openssl >= 3.0.0, < 3.0.3' - debian_linux = 9.0 - debian_linux = 10.0 - debian_linux = 11.0 - active_iq_unified_manager - clustered_data_ontap - clustered_data_ontap_antivirus_connector - oncommand_insight - oncommand_workflow_automation - santricity_smi-s_provider - smi-s_provider - snapcenter - snapmanager - 'solidfire,_enterprise_sds_&_hci_storage_node' - solidfire_&_hci_management_node - a700s_firmware - h300s_firmware - h500s_firmware - h700s_firmware - h300e_firmware - h500e_firmware - h700e_firmware - h410s_firmware - aff_8300_firmware - fas_8300_firmware - aff_8700_firmware - fas_8700_firmware - aff_a400_firmware - fabric-attached_storage_a400_firmware - a250_firmware - aff_500f_firmware - fas_500f_firmware - enterprise_manager_ops_center = 12.4.0.0 - 'mysql_server >= 5.0.0, <= 5.7.38' - 'mysql_server >= 8.0.0, <= 8.0.29' - mysql_workbench <= 8.0.29 - fedora = 35 - fedora = 36 patched: - brownfield_connectivity_gateway 2.15 - openssl 3.0.3 published: '2022-05-03' updated: '2026-10-14' sourceUpdated: '2026-10-14T13:17:18.103' source: NVD sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2022-1292' references: - url: 'https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf' label: openssl-security@openssl.org - url: >- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2 label: openssl-security@openssl.org - url: >- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=548d3f280a6e737673f5b61fce24bb100108dfeb label: openssl-security@openssl.org - url: >- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23 label: openssl-security@openssl.org - url: 'https://lists.debian.org/debian-lts-announce/2022/05/msg00019.html' label: openssl-security@openssl.org - url: >- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VX4KWHPMKYJL6ZLW4M5IU7E5UV5ZWJQU/ label: openssl-security@openssl.org - url: >- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNU5M7BXMML26G3GPYKFGQYPQDRSNKDD/ label: openssl-security@openssl.org - url: 'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0011' label: openssl-security@openssl.org - url: 'https://security.gentoo.org/glsa/202210-02' label: openssl-security@openssl.org - url: 'https://security.netapp.com/advisory/ntap-20220602-0009/' label: openssl-security@openssl.org - url: 'https://security.netapp.com/advisory/ntap-20220729-0004/' label: openssl-security@openssl.org - url: 'https://www.debian.org/security/2022/dsa-5139' label: openssl-security@openssl.org - url: 'https://www.openssl.org/news/secadv/20220503.txt' label: openssl-security@openssl.org - url: 'https://www.oracle.com/security-alerts/cpujul2022.html' label: openssl-security@openssl.org - url: 'https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf' label: af854a3a-2127-422b-91ae-364da2661108 - url: >- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2 label: af854a3a-2127-422b-91ae-364da2661108 - url: >- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=548d3f280a6e737673f5b61fce24bb100108dfeb label: af854a3a-2127-422b-91ae-364da2661108 - url: >- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23 label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://gitlab.com/fraf0/cve-2022-1292-re_score-analysis' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://lists.debian.org/debian-lts-announce/2022/05/msg00019.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: >- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VX4KWHPMKYJL6ZLW4M5IU7E5UV5ZWJQU/ label: af854a3a-2127-422b-91ae-364da2661108 - url: >- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNU5M7BXMML26G3GPYKFGQYPQDRSNKDD/ label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0011' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://security.gentoo.org/glsa/202210-02' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://security.netapp.com/advisory/ntap-20220602-0009/' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://security.netapp.com/advisory/ntap-20220729-0004/' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://www.debian.org/security/2022/dsa-5139' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://www.openssl.org/news/secadv/20220503.txt' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://www.oracle.com/security-alerts/cpujul2022.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://cert-portal.siemens.com/productcert/html/ssa-146325.html' label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e - url: 'https://cert-portal.siemens.com/productcert/html/ssa-398330.html' label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e - url: 'https://cert-portal.siemens.com/productcert/html/ssa-419740.html' label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e - url: 'https://cert-portal.siemens.com/productcert/html/ssa-794697.html' label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e - url: 'https://cert-portal.siemens.com/productcert/html/ssa-942865.html' label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e - url: 'https://cert-portal.siemens.com/productcert/html/ssa-953464.html' label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e tags: - nvd - exploit-available epss: 0.82612 epssPercentile: 0.99662 exploits: github: 5 githubRepos: - 'https://github.com/li8u99/CVE-2022-1292' - 'https://github.com/alcaparra/CVE-2022-1292' - 'https://github.com/rama291041610/CVE-2022-1292' checkedAt: '2026-10-14T13:31:34.729Z' exploitAvailable: true ingestedAt: '2026-10-14T13:30:58.410Z' --- ## Overview The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd). ## Affected - `brownfield_connectivity_gateway < 2.15` - `openssl >= 1.0.2, < 1.0.2ze` - `openssl >= 1.1.1, < 1.1.1o` - `openssl >= 3.0.0, < 3.0.3` - `debian_linux = 9.0` - `debian_linux = 10.0` - `debian_linux = 11.0` - `active_iq_unified_manager` - `clustered_data_ontap` - `clustered_data_ontap_antivirus_connector` - `oncommand_insight` - `oncommand_workflow_automation` - `santricity_smi-s_provider` - `smi-s_provider` - `snapcenter` - `snapmanager` - `solidfire,_enterprise_sds_&_hci_storage_node` - `solidfire_&_hci_management_node` - `a700s_firmware` - `h300s_firmware` - `h500s_firmware` - `h700s_firmware` - `h300e_firmware` - `h500e_firmware` - `h700e_firmware` - `h410s_firmware` - `aff_8300_firmware` - `fas_8300_firmware` - `aff_8700_firmware` - `fas_8700_firmware` - `aff_a400_firmware` - `fabric-attached_storage_a400_firmware` - `a250_firmware` - `aff_500f_firmware` - `fas_500f_firmware` - `enterprise_manager_ops_center = 12.4.0.0` - `mysql_server >= 5.0.0, <= 5.7.38` - `mysql_server >= 8.0.0, <= 8.0.29` - `mysql_workbench <= 8.0.29` - `fedora = 35` - `fedora = 36` ## Remediation Upgrade past the affected range: - `brownfield_connectivity_gateway 2.15` - `openssl 3.0.3`