Lucene search
HistoryOct 31, 2022 - 8:15 p.m.
CVE-2022-41644
delta electronics
infrasuite device master
authentication bypass
privilege escalation
denial of service
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
52.9%
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior lacks authentication for a function that changes group privileges. An attacker could use this to create a denial-of-service state or escalate their own privileges.
Affected configurations
Node
deltawwinfrasuite_device_masterRange<00.00.02a
| Vendor | Product | Version | CPE |
|---|---|---|---|
| deltaww | infrasuite_device_master | * | cpe:2.3:a:deltaww:infrasuite_device_master:*:*:*:*:*:*:*:* |
Related
prion
prion
Authentication flaw
2022-10-31 20:15:00
cvelist
cvelist
CVE-2022-41644
2022-10-31 19:47:21
zdi
zdi
cve
cve
CVE-2022-41644
2022-10-31 20:15:13
ics
ics
Delta Electronics InfraSuite Device Master (Update A)
2023-01-18 12:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
52.9%
Related for NVD:CVE-2022-41644