OpenSSL c_rehash command injection (CVE-2022-1292)

Summary

The c_rehash script fails to sanitize filenames, enabling command injection.

Vulnerability ID	Vulnerability Overview
CVE-2022-1292	The c_rehash script does not properly escape shell metacharacters in filenames. If an attacker can place a crafted file into a hashed directory, they can execute arbitrary commands.

Affected Supported TeraStations

TS5010/3020/3010
Fixed in firmware version 6.12
 

Back to Security Notices

Date	Description
09/10/2026	Initial release

Back to Security Notices