Exploit for OS Command Injection in Siemens Brownfield Connectivity Gateway CVE-2022-1292

githubexploit · 2022-05-24

Description

Describes a command injection vulnerability in Siemens Brownfield Connectivity Gateway, 2022-1292.

Entry point

Parameterfname · path

Path/etc/ssl/certs/

Command injection via unsanitized shell metacharacters in filenames processed by c_rehash (local path /etc/ssl/certs/).

Affected Siemens Brownfield Connectivity Gateway versions

Siemens Brownfield Connectivity Gateway< 2.15

All known vulnerabilities by product

Alt Linux Almalinux Astra Linux Centos Ibm Aix Linuxmint Mysql Server Openssl

CVSS 10.0 for CVE-2022-1292

10.0

HIGH SEVERITY

Version 2.0

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

49%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

82.6%higher than 99.6% of all CVEs

Updated 2026-07-21

Exploit Details

Modified:2024-08-12 20:23

Last Seen:2025-09-06 15:01

Reporter:li8u99

Other exploits for CVE-2022-1292

Exploit for OS Command Injection in Siemens Brownfield_Connectivity_Gateway

2022-09-13 und3sc0n0c1d0GITHUB

Exploit for OS Command Injection in Siemens Brownfield_Connectivity_Gateway

2022-09-01 greek0x0GITHUB

Exploit for OS Command Injection in Siemens Brownfield_Connectivity_Gateway

2022-05-30 alcaparraGITHUB

Exploit for OS Command Injection in Siemens Brownfield_Connectivity_Gateway

2022-05-30 rama291041610GITHUB

Exploit Code

README6 lines

## https://sploitus.com/exploit?id=8E0D4DF9-029A-59C5-B3A1-50166EA449CB
# CVE-2022-1292

bash chack.sh

![image](https://user-images.githubusercontent.com/37184853/170004376-ddbcceb0-838d-4932-99e4-699d1b35a31f.png)

Exploit Code

Share

Share on social media: