CVE-2022-28223: Tekon KIO devices through 2022-03-30 allow an authenticated admin user to escalate privileges to root by uploa
48
This month
CRITICAL 9.1UPGRADEUPGRADEUPGRADE
CVE-2022-28223 is a critical-severity flaw (CVSS 9.1) affecting kio firmware, kio-1m firmware, kio-2mrs firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Tekon KIO devices through 2022-03-30 allow an authenticated admin user to escalate privileges to root by uploading a malicious Lua plugin.
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
Published CVE record published
Updated Record last modified
tekon kio firmware UPGRADE
Affected: <= 2022-03-30
Fixed in: newer than 2022-03-30
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
tekon kio-1m firmware UPGRADE
Affected: <= 2022-03-30
Fixed in: newer than 2022-03-30
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
tekon kio-2mrs firmware UPGRADE
Affected: <= 2022-03-30
Fixed in: newer than 2022-03-30
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
tekon kio-2m firmware UPGRADE
Affected: <= 2022-03-30
Fixed in: newer than 2022-03-30
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
tekon kio-2ms firmware UPGRADE
Affected: <= 2022-03-30
Fixed in: newer than 2022-03-30
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
tekon kio-2md firmware UPGRADE
Affected: <= 2022-03-30
Fixed in: newer than 2022-03-30
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
Verify at the official sourceNVD · CVE Program · Report a problem with this page Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2022-28223?
kio firmware: upgrade to newer than 2022-03-30; kio-1m firmware: upgrade to newer than 2022-03-30; kio-2mrs firmware: upgrade to newer than 2022-03-30. Exact commands for each OS are on this page.
Is CVE-2022-28223 being exploited?
CVE-2022-28223 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2022-28223 affect?
CVE-2022-28223 affects kio firmware, kio-1m firmware, kio-2mrs firmware. Severity is critical (CVSS 9.1). Tekon KIO devices through 2022-03-30 allow an authenticated admin user to escalate privileges to root by uploading a malicious Lua plugin.
PatchTheCVE