CVE-2022-41779CWE-502

Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize network packets without proper verification

High · published October 31, 2022

CVSS v3.1
8.8
EPSS
1%
Percentile
67.7
In the wild
Unconfirmed
What it is

Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize network packets without proper verification. If the device connects to an attacker-controlled server, the attacker could send maliciously crafted packets that would be deserialized and executed, leading to remote code execution.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01191 · 67.7th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2022-10-31T19:19Z
EPSS history
Timeline
  • 31 OCT 19:19Z
    Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize network packets without proper verification
    cvelistv5