Delta Electronics InfraSuite Device Master
Successful exploitation of these vulnerabilities could allow an unauthenticated attacker to remotely execute code, cause a denial-of-service condition by remotely deleting files or changing group privileges, or remotely read and write files, all with local administrator privileges.
beschreibt (10)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-41778US | high8.8 | — | ||
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-DataCollect service port without proper verifica… | ||||
| CVE-2022-41779US | critical9.8 | — | ||
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize network packets without proper verification. If the device connects to an attacker-controlled s… | ||||
| CVE-2022-41776US | high7.5OT erhöht | — | ||
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to trigger the WriteConfiguration method, which could allow an attacker to prov… | ||||
| CVE-2022-41772US | critical9.8 | — | ||
Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior mishandle .ZIP archives containing characters used in path traversal. This path traversal could result in r… | ||||
| CVE-2022-41688US | high7.5OT erhöht | — | ||
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior lack proper authentication for functions that create and modify user groups. An attacker could provide mali… | ||||
| CVE-2022-41657US | critical9.8 | — | ||
Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior allow attacker provided data already serialized into memory to be used in file operation application progra… | ||||
| CVE-2022-41644US | high8.8OT erhöht | — | ||
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior lacks authentication for a function that changes group privileges. An attacker could use this to create a… | ||||
| CVE-2022-41629US | critical9.1OT erhöht | — | ||
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to access the aprunning endpoint, which could allow an attacker to retrieve any… | ||||
| CVE-2022-40202US | critical9.8OT erhöht | — | ||
The database backup function in Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior lacks proper authentication. An attacker could provide malicious serialized… | ||||
| CVE-2022-38142US | critical9.8 | — | ||
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-Gateway service port without proper verification… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-22-298-07 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (10)
- BehobenInfraSuite Device Master
Delta Electronics recommends users uninstall old versions of InfraSuite Device Master and reinstall the updated Version 1.0.3 using the installer.
https://datacenter-softwarecenter.deltaww.com/Download/UPS/Software/InfraSuite_Device_Master_1.0.3(x64).exe - BehobenInfraSuite Device Master
Delta Electronics recommends users uninstall old versions of InfraSuite Device Master and reinstall the updated Version 1.0.3 using the installer.
https://datacenter-softwarecenter.deltaww.com/Download/UPS/Software/InfraSuite_Device_Master_1.0.3(x64).exe - BehobenInfraSuite Device Master
Delta Electronics recommends users uninstall old versions of InfraSuite Device Master and reinstall the updated Version 1.0.3 using the installer.
https://datacenter-softwarecenter.deltaww.com/Download/UPS/Software/InfraSuite_Device_Master_1.0.3(x64).exe - BehobenInfraSuite Device Master
Delta Electronics recommends users uninstall old versions of InfraSuite Device Master and reinstall the updated Version 1.0.3 using the installer.
https://datacenter-softwarecenter.deltaww.com/Download/UPS/Software/InfraSuite_Device_Master_1.0.3(x64).exe - BehobenInfraSuite Device Master
Delta Electronics recommends users uninstall old versions of InfraSuite Device Master and reinstall the updated Version 1.0.3 using the installer.
https://datacenter-softwarecenter.deltaww.com/Download/UPS/Software/InfraSuite_Device_Master_1.0.3(x64).exe - BehobenInfraSuite Device Master
Delta Electronics recommends users uninstall old versions of InfraSuite Device Master and reinstall the updated Version 1.0.3 using the installer.
https://datacenter-softwarecenter.deltaww.com/Download/UPS/Software/InfraSuite_Device_Master_1.0.3(x64).exe - BehobenInfraSuite Device Master
Delta Electronics recommends users uninstall old versions of InfraSuite Device Master and reinstall the updated Version 1.0.3 using the installer.
https://datacenter-softwarecenter.deltaww.com/Download/UPS/Software/InfraSuite_Device_Master_1.0.3(x64).exe - BehobenInfraSuite Device Master
Delta Electronics recommends users uninstall old versions of InfraSuite Device Master and reinstall the updated Version 1.0.3 using the installer.
https://datacenter-softwarecenter.deltaww.com/Download/UPS/Software/InfraSuite_Device_Master_1.0.3(x64).exe - BehobenInfraSuite Device Master
Delta Electronics recommends users uninstall old versions of InfraSuite Device Master and reinstall the updated Version 1.0.3 using the installer.
https://datacenter-softwarecenter.deltaww.com/Download/UPS/Software/InfraSuite_Device_Master_1.0.3(x64).exe - BehobenInfraSuite Device Master
Delta Electronics recommends users uninstall old versions of InfraSuite Device Master and reinstall the updated Version 1.0.3 using the installer.
https://datacenter-softwarecenter.deltaww.com/Download/UPS/Software/InfraSuite_Device_Master_1.0.3(x64).exe
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan