# CVE-2022-1292: The c_rehash script allows command injection

Status: published. Published: 2022-05-03. Updated: 2026-11-04.

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).

## Remediation

No remediation reported in collected sources

## Affected products and versions

- OpenSSL / OpenSSL: Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2) (affected); Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n) (affected); Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd) (affected). Source: CNA: openssl
- Siemens / SIMATIC S7-1500 CPU 1518-4 PN/DP MFP: ≥ V3.1.0; < V3.1.5 (affected, custom). Source: ADP: siemens-SADP
- Siemens / SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP: ≥ V3.1.0; < V3.1.5 (affected, custom). Source: ADP: siemens-SADP
- Siemens / SIMATIC S7-1500 TM MFP - GNU/Linux subsystem: ≥ 0; < V1.1 (affected, custom). Source: ADP: siemens-SADP
- Siemens / SINAMICS PERFECT HARMONY GH180: ≥ 0; < * (affected, custom). Source: ADP: siemens-SADP
- Siemens / SIPLUS S7-1500 CPU 1518-4 PN/DP MFP: ≥ V3.1.0; < V3.1.5 (affected, custom). Source: ADP: siemens-SADP

## NVD configuration conditions

Affected CPE matches depend on the following AND/OR and negation conditions:

```json
[
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:siemens:brownfield_connectivity_gateway:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "2.15",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "OR"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "1.0.2ze",
            "versionStartIncluding": "1.0.2",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "1.1.1o",
            "versionStartIncluding": "1.1.1",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "3.0.3",
            "versionStartIncluding": "3.0.0",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "OR"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "OR"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vsphere:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:netapp:clustered_data_ontap_antivirus_connector:-:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:netapp:santricity_smi-s_provider:-:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:netapp:smi-s_provider:-:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:hyper-v:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:netapp:solidfire\\,_enterprise_sds_\\&_hci_storage_node:-:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:netapp:solidfire_\\&_hci_management_node:-:*:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "OR"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:netapp:a700s_firmware:-:*:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:netapp:a700s:-:*:*:*:*:*:*:*",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:*",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:*",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:*",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:netapp:aff_8300_firmware:-:*:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:netapp:aff_8300:-:*:*:*:*:*:*:*",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:netapp:fas_8300_firmware:-:*:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:netapp:fas_8300:-:*:*:*:*:*:*:*",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:netapp:aff_8700_firmware:-:*:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:netapp:aff_8700:-:*:*:*:*:*:*:*",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:netapp:fas_8700_firmware:-:*:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:netapp:fas_8700:-:*:*:*:*:*:*:*",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:netapp:aff_a400_firmware:-:*:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:netapp:aff_a400:-:*:*:*:*:*:*:*",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:netapp:fabric-attached_storage_a400_firmware:-:*:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:netapp:fabric-attached_storage_a400:-:*:*:*:*:*:*:*",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:netapp:a250_firmware:-:*:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:netapp:a250:-:*:*:*:*:*:*:*",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:netapp:aff_500f_firmware:-:*:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:netapp:aff_500f:-:*:*:*:*:*:*:*",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:netapp:fas_500f_firmware:-:*:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:netapp:fas_500f:-:*:*:*:*:*:*:*",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding": "5.7.38",
            "versionStartIncluding": "5.0.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding": "8.0.29",
            "versionStartIncluding": "8.0.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*",
            "versionEndIncluding": "8.0.29",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "OR"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "OR"
  }
]
```

## Severity and prioritization

- CVSS 3.1: 9.8 (critical); CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H; source: ADP: CISA-ADP

- CVSS 3.1: 7.3 (high); CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H; source: NVD: nvd@nist.gov

- CVSS 3.1: 9.8 (critical); CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H; source: NVD: 134c704f-9b21-4f2e-91b3-4a467353bcc0

- CVSS 2.0: 10 (high); AV:N/AC:L/Au:N/C:C/I:C/A:C; source: NVD: nvd@nist.gov

- CISA KEV: No listing in collected sources

- EPSS: 82.61% as of 2026-11-03; percentile 99.67%

- SSVC: exploitation poc; automatable yes; technical impact total; source ADP: CISA-ADP

- Weaknesses: CWE-78

## Exploit evidence

No exploit evidence in collected sources. This is not proof of no exploitation.

## References

- https://www.openssl.org/news/secadv/20220503.txt (CNA: openssl)

- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2 (CNA: openssl)

- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23 (CNA: openssl)

- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=548d3f280a6e737673f5b61fce24bb100108dfeb (CNA: openssl)

- https://lists.debian.org/debian-lts-announce/2022/05/msg00019.html (CNA: openssl; mailing-list)

- https://www.debian.org/security/2022/dsa-5139 (CNA: openssl; vendor-advisory)

- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VX4KWHPMKYJL6ZLW4M5IU7E5UV5ZWJQU/ (CNA: openssl; vendor-advisory)

- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNU5M7BXMML26G3GPYKFGQYPQDRSNKDD/ (CNA: openssl; vendor-advisory)

- https://www.oracle.com/security-alerts/cpujul2022.html (CNA: openssl)

- https://security.netapp.com/advisory/ntap-20220602-0009/ (CNA: openssl)

- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0011 (CNA: openssl)

- https://security.netapp.com/advisory/ntap-20220729-0004/ (CNA: openssl)

- https://security.gentoo.org/glsa/202210-02 (CNA: openssl; vendor-advisory)

- https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf (CNA: openssl)

- https://gitlab.com/fraf0/cve-2022-1292-re_score-analysis (ADP: CVE)

- https://www.openssl.org/news/secadv/20220503.txt (ADP: CVE; x_transferred)

- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2 (ADP: CVE; x_transferred)

- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23 (ADP: CVE; x_transferred)

- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=548d3f280a6e737673f5b61fce24bb100108dfeb (ADP: CVE; x_transferred)

- https://lists.debian.org/debian-lts-announce/2022/05/msg00019.html (ADP: CVE; mailing-list, x_transferred)

- https://www.debian.org/security/2022/dsa-5139 (ADP: CVE; vendor-advisory, x_transferred)

- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VX4KWHPMKYJL6ZLW4M5IU7E5UV5ZWJQU/ (ADP: CVE; vendor-advisory, x_transferred)

- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNU5M7BXMML26G3GPYKFGQYPQDRSNKDD/ (ADP: CVE; vendor-advisory, x_transferred)

- https://www.oracle.com/security-alerts/cpujul2022.html (ADP: CVE; x_transferred)

- https://security.netapp.com/advisory/ntap-20220602-0009/ (ADP: CVE; x_transferred)

- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0011 (ADP: CVE; x_transferred)

- https://security.netapp.com/advisory/ntap-20220729-0004/ (ADP: CVE; x_transferred)

- https://security.gentoo.org/glsa/202210-02 (ADP: CVE; vendor-advisory, x_transferred)

- https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf (ADP: CVE; x_transferred)

- https://cert-portal.siemens.com/productcert/html/ssa-953464.html (ADP: siemens-SADP)

- https://cert-portal.siemens.com/productcert/html/ssa-419740.html (ADP: siemens-SADP)

- https://cert-portal.siemens.com/productcert/html/ssa-794697.html (ADP: siemens-SADP)

- https://cert-portal.siemens.com/productcert/html/ssa-942865.html (ADP: siemens-SADP)

- https://cert-portal.siemens.com/productcert/html/ssa-146325.html (ADP: siemens-SADP)

- https://cert-portal.siemens.com/productcert/html/ssa-398330.html (ADP: siemens-SADP)

- https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf (openssl-security@openssl.org; Third Party Advisory)

- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2 (openssl-security@openssl.org; Broken Link)

- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=548d3f280a6e737673f5b61fce24bb100108dfeb (openssl-security@openssl.org; Broken Link)

- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23 (openssl-security@openssl.org; Broken Link)

- https://lists.debian.org/debian-lts-announce/2022/05/msg00019.html (openssl-security@openssl.org; Mailing List, Third Party Advisory)

- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VX4KWHPMKYJL6ZLW4M5IU7E5UV5ZWJQU/ (openssl-security@openssl.org; Mailing List, Third Party Advisory)

- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNU5M7BXMML26G3GPYKFGQYPQDRSNKDD/ (openssl-security@openssl.org; Mailing List, Third Party Advisory)

- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0011 (openssl-security@openssl.org; Third Party Advisory)

- https://security.gentoo.org/glsa/202210-02 (openssl-security@openssl.org; Third Party Advisory)

- https://security.netapp.com/advisory/ntap-20220602-0009/ (openssl-security@openssl.org; Third Party Advisory)

- https://security.netapp.com/advisory/ntap-20220729-0004/ (openssl-security@openssl.org; Third Party Advisory)

- https://www.debian.org/security/2022/dsa-5139 (openssl-security@openssl.org; Third Party Advisory)

- https://www.openssl.org/news/secadv/20220503.txt (openssl-security@openssl.org; Vendor Advisory)

- https://www.oracle.com/security-alerts/cpujul2022.html (openssl-security@openssl.org; Third Party Advisory)

- https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf (af854a3a-2127-422b-91ae-364da2661108; Third Party Advisory)

- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2 (af854a3a-2127-422b-91ae-364da2661108; Broken Link)

- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=548d3f280a6e737673f5b61fce24bb100108dfeb (af854a3a-2127-422b-91ae-364da2661108; Broken Link)

- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23 (af854a3a-2127-422b-91ae-364da2661108; Broken Link)

- https://gitlab.com/fraf0/cve-2022-1292-re_score-analysis (af854a3a-2127-422b-91ae-364da2661108)

- https://lists.debian.org/debian-lts-announce/2022/05/msg00019.html (af854a3a-2127-422b-91ae-364da2661108; Mailing List, Third Party Advisory)

- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VX4KWHPMKYJL6ZLW4M5IU7E5UV5ZWJQU/ (af854a3a-2127-422b-91ae-364da2661108; Mailing List, Third Party Advisory)

- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNU5M7BXMML26G3GPYKFGQYPQDRSNKDD/ (af854a3a-2127-422b-91ae-364da2661108; Mailing List, Third Party Advisory)

- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0011 (af854a3a-2127-422b-91ae-364da2661108; Third Party Advisory)

- https://security.gentoo.org/glsa/202210-02 (af854a3a-2127-422b-91ae-364da2661108; Third Party Advisory)

- https://security.netapp.com/advisory/ntap-20220602-0009/ (af854a3a-2127-422b-91ae-364da2661108; Third Party Advisory)

- https://security.netapp.com/advisory/ntap-20220729-0004/ (af854a3a-2127-422b-91ae-364da2661108; Third Party Advisory)

- https://www.debian.org/security/2022/dsa-5139 (af854a3a-2127-422b-91ae-364da2661108; Third Party Advisory)

- https://www.openssl.org/news/secadv/20220503.txt (af854a3a-2127-422b-91ae-364da2661108; Vendor Advisory)

- https://www.oracle.com/security-alerts/cpujul2022.html (af854a3a-2127-422b-91ae-364da2661108; Third Party Advisory)

- https://cert-portal.siemens.com/productcert/html/ssa-146325.html (0b142b55-0307-4c5a-b3c9-f314f3fb7c5e)

- https://cert-portal.siemens.com/productcert/html/ssa-398330.html (0b142b55-0307-4c5a-b3c9-f314f3fb7c5e)

- https://cert-portal.siemens.com/productcert/html/ssa-419740.html (0b142b55-0307-4c5a-b3c9-f314f3fb7c5e)

- https://cert-portal.siemens.com/productcert/html/ssa-794697.html (0b142b55-0307-4c5a-b3c9-f314f3fb7c5e)

- https://cert-portal.siemens.com/productcert/html/ssa-942865.html (0b142b55-0307-4c5a-b3c9-f314f3fb7c5e)

- https://cert-portal.siemens.com/productcert/html/ssa-953464.html (0b142b55-0307-4c5a-b3c9-f314f3fb7c5e)

## Provenance

- CNA: openssl: https://www.cve.org/CVERecord?id=CVE-2022-1292; retrieved 2026-11-04; source updated 2026-11-04

- NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-1292; retrieved 2026-11-04; source updated 2026-11-03

- FIRST EPSS: https://api.first.org/data/v1/epss?cve=CVE-2022-1292; retrieved 2026-11-03; source updated Not reported

Revision: 2c21adb250d3588365c519439a1d265314cca6407a1052cbb3c15bdff953b2f2

Canonical: https://y2.dev/cve/CVE-2022-1292

## Agent and API access

Public CVE pages, Markdown, and JSON are free to read without an account or API key.

- Public catalog: https://y2.dev/cve/index.json. Follow nextCursor with the same search, filters, sort, and limit (1–100). A null cursor marks the end.

- WebMCP: search_cve_disclosures, get_cve_disclosure, get_cve_page_markdown, get_y2_cve_access. Available in compatible browsers.

- Cyber API: https://api.y2.dev/api/v2/cyber/cves and https://api.y2.dev/api/v2/cyber/cves/{cveId}.

- Y2 Pro or Elite: create a workspace API key with the intel:cyber scope and send Authorization: Bearer <Y2_API_KEY>. Setup: https://y2.dev/docs/api/create-key.

- x402: Pay per request without an account or API key. Omit Authorization, read the HTTP 402 PAYMENT-REQUIRED challenge, validate its current requirements, and retry with PAYMENT-SIGNATURE through an authorized payment client. These browser tools never make payments. Guide: https://y2.dev/docs/api/x402.

- OpenAPI: https://y2.dev/api/openapi.yaml. Agent access metadata: https://y2.dev/cve/agent.json.

Collected public records only. Check source status for coverage and freshness.