Delta Electronics InfraSuite Device Master
Successful exploitation of these vulnerabilities could allow an unauthenticated attacker to remotely execute code, cause a denial-of-service condition by remotely deleting files or changing group privileges, or remotely read and write files, all with local administrator privileges.
describes (10)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-41778US | high8.8 | — | ||
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-DataCollect service port without proper verifica… | ||||
| CVE-2022-41779US | critical9.8 | — | ||
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize network packets without proper verification. If the device connects to an attacker-controlled s… | ||||
| CVE-2022-41776US | high7.5OT elevated | — | ||
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to trigger the WriteConfiguration method, which could allow an attacker to prov… | ||||
| CVE-2022-41772US | critical9.8 | — | ||
Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior mishandle .ZIP archives containing characters used in path traversal. This path traversal could result in r… | ||||
| CVE-2022-41688US | high7.5OT elevated | — | ||
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior lack proper authentication for functions that create and modify user groups. An attacker could provide mali… | ||||
| CVE-2022-41657US | critical9.8 | — | ||
Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior allow attacker provided data already serialized into memory to be used in file operation application progra… | ||||
| CVE-2022-41644US | high8.8OT elevated | — | ||
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior lacks authentication for a function that changes group privileges. An attacker could use this to create a… | ||||
| CVE-2022-41629US | critical9.1OT elevated | — | ||
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to access the aprunning endpoint, which could allow an attacker to retrieve any… | ||||
| CVE-2022-40202US | critical9.8OT elevated | — | ||
The database backup function in Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior lacks proper authentication. An attacker could provide malicious serialized… | ||||
| CVE-2022-38142US | critical9.8 | — | ||
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-Gateway service port without proper verification… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-22-298-07 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (10)
- FixedInfraSuite Device Master
Delta Electronics recommends users uninstall old versions of InfraSuite Device Master and reinstall the updated Version 1.0.3 using the installer.
https://datacenter-softwarecenter.deltaww.com/Download/UPS/Software/InfraSuite_Device_Master_1.0.3(x64).exe - FixedInfraSuite Device Master
Delta Electronics recommends users uninstall old versions of InfraSuite Device Master and reinstall the updated Version 1.0.3 using the installer.
https://datacenter-softwarecenter.deltaww.com/Download/UPS/Software/InfraSuite_Device_Master_1.0.3(x64).exe - FixedInfraSuite Device Master
Delta Electronics recommends users uninstall old versions of InfraSuite Device Master and reinstall the updated Version 1.0.3 using the installer.
https://datacenter-softwarecenter.deltaww.com/Download/UPS/Software/InfraSuite_Device_Master_1.0.3(x64).exe - FixedInfraSuite Device Master
Delta Electronics recommends users uninstall old versions of InfraSuite Device Master and reinstall the updated Version 1.0.3 using the installer.
https://datacenter-softwarecenter.deltaww.com/Download/UPS/Software/InfraSuite_Device_Master_1.0.3(x64).exe - FixedInfraSuite Device Master
Delta Electronics recommends users uninstall old versions of InfraSuite Device Master and reinstall the updated Version 1.0.3 using the installer.
https://datacenter-softwarecenter.deltaww.com/Download/UPS/Software/InfraSuite_Device_Master_1.0.3(x64).exe - FixedInfraSuite Device Master
Delta Electronics recommends users uninstall old versions of InfraSuite Device Master and reinstall the updated Version 1.0.3 using the installer.
https://datacenter-softwarecenter.deltaww.com/Download/UPS/Software/InfraSuite_Device_Master_1.0.3(x64).exe - FixedInfraSuite Device Master
Delta Electronics recommends users uninstall old versions of InfraSuite Device Master and reinstall the updated Version 1.0.3 using the installer.
https://datacenter-softwarecenter.deltaww.com/Download/UPS/Software/InfraSuite_Device_Master_1.0.3(x64).exe - FixedInfraSuite Device Master
Delta Electronics recommends users uninstall old versions of InfraSuite Device Master and reinstall the updated Version 1.0.3 using the installer.
https://datacenter-softwarecenter.deltaww.com/Download/UPS/Software/InfraSuite_Device_Master_1.0.3(x64).exe - FixedInfraSuite Device Master
Delta Electronics recommends users uninstall old versions of InfraSuite Device Master and reinstall the updated Version 1.0.3 using the installer.
https://datacenter-softwarecenter.deltaww.com/Download/UPS/Software/InfraSuite_Device_Master_1.0.3(x64).exe - FixedInfraSuite Device Master
Delta Electronics recommends users uninstall old versions of InfraSuite Device Master and reinstall the updated Version 1.0.3 using the installer.
https://datacenter-softwarecenter.deltaww.com/Download/UPS/Software/InfraSuite_Device_Master_1.0.3(x64).exe
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan