CVE-2026-22317
Received Received - Intake
Command Injection in Root CA Certificate Transfer Allows Root Access

Publication date: 2026-03-18

Last updated on: 2026-03-18

Assigner: CERT VDE

Description
A command injection vulnerability in the device’s Root CA certificate transfer workflow allows a high-privileged attacker to send crafted HTTP POST requests that result in arbitrary command execution on the underlying Linux OS with root privileges.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-03-18
Last Modified
2026-03-18
Generated
2026-06-16
AI Q&A
2026-03-18
EPSS Evaluated
2026-06-14
NVD
CVE-2026-22317
EUVD
EUVD-2026-12786
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
phoenix_contact fl_switch to 3.53 (exc)
phoenix_contact fl_switch 3.53
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-77 The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is a command injection flaw found in the device's Root CA certificate transfer workflow. It allows an attacker with high privileges to send specially crafted HTTP POST requests that lead to the execution of arbitrary commands on the underlying Linux operating system with root-level privileges.

Impact Analysis

The impact of this vulnerability is severe because it enables an attacker with high privileges to execute any command on the device's Linux OS as root. This can lead to full system compromise, unauthorized data access, modification or deletion of data, disruption of services, and potentially taking control over the affected device.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-22317. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart