CVE-2022-41776CWE-306

Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to trigger the WriteConfiguration method, which could allow…

High · published October 31, 2022

CVSS v3.1
7.5
EPSS
1%
Percentile
46.9
In the wild
Unconfirmed
What it is

Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to trigger the WriteConfiguration method, which could allow an attacker to provide new values for user configuration files such as UserListInfo.xml. This could lead to the changing of administrative passwords.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00579 · 46.9th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2022-10-31T19:48Z
EPSS history
Timeline
  • 31 OCT 19:48Z
    Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to trigger the WriteConfiguration method, which could allow…
    cvelistv5