OpenSSL c_rehash shell injection (CVE-2022-2068)

Sep 10, 2026

An incomplete fix for CVE-2022-1292 allows for continued shell injection risks.

Vulnerability ID	Vulnerability Overview
CVE-2022-2068	The patch for the `c_rehash` script was insufficient, and it remains vulnerable to command injection via maliciously crafted certificate filenames.

Affected Supported TeraStations

TS5010/3020/3010
Fixed in firmware version 6.12

Date	Description
09/10/2026	Initial release