Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2022-41778
HistoryJan 13, 2023 - 12:15 a.m.

CVE-2022-41778

2023-01-1300:15:09
CWE-502
[email protected]
web.nvd.nist.gov
3
delta electronics
infrasuite device master
user-supplied data
device-datacollect service port
arbitrary code execution

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

55.6%

JSON

Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-DataCollect service port without proper verification. An attacker could provide malicious serialized objects to execute arbitrary code upon deserialization.

Affected configurations

Nvd
Node
deltawwinfrasuite_device_masterRange≤00.00.01a
VendorProductVersionCPE
deltawwinfrasuite_device_master*cpe:2.3:a:deltaww:infrasuite_device_master:*:*:*:*:*:*:*:*

Related

prion 1
zdi 1
cvelist 1
cve 1
ics 1
prion
prion
Deserialization of untrusted data
2023-01-13 00:15:00
zdi
zdi
Delta Industrial Automation InfraSuite Device Master Device-Gateway Service Deserialization of Untrusted Data Remote Code Execution Vulnerability
2022-10-27 00:00:00
cvelist
cvelist
CVE-2022-41778
2023-01-12 23:19:47
cve
cve
CVE-2022-41778
2023-01-13 00:15:09
ics
ics
Delta Electronics InfraSuite Device Master (Update A)
2023-01-18 12:00:00

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

55.6%

JSON
Related for NVD:CVE-2022-41778
prion1zdi1cvelist1cve1ics1