CVE-2022-41629CWE-306

Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to access the aprunning endpoint, which could allow an…

High · published October 31, 2022

CVSS v3.1
7.5
EPSS
1%
Percentile
51.3
In the wild
Unconfirmed
What it is

Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to access the aprunning endpoint, which could allow an attacker to retrieve any file from the “RunningConfigs” directory. The attacker could then view and modify configuration files such as UserListInfo.xml, which would allow them to see existing administrative passwords.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00667 · 51.3th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2022-10-31T19:51Z
EPSS history
Timeline
  • 31 OCT 19:51Z
    Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to access the aprunning endpoint, which could allow an…
    cvelistv5