CVE-2022-41657: Path Traversal
Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior allow attacker provided data already serialized into memory to be used in file operation application programmable interfaces (APIs). This could create arbitrary files, which could be used in API operations and could ultimately result in remote code execution.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for Delta Electronics InfraSuite Device Master?
The vulnerability ID for Delta Electronics InfraSuite Device Master is CVE-2022-41657.
What is the severity of CVE-2022-41657?
The severity of CVE-2022-41657 is critical with a severity value of 9.8.
What is affected by CVE-2022-41657?
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior are affected by CVE-2022-41657.
How does CVE-2022-41657 work?
CVE-2022-41657 allows an attacker to use attacker provided data already serialized into memory to create arbitrary files, which can be used in file operation application programmable interfaces (APIs) and can ultimately cause remote code execution.
Are there any patches or fixes available for CVE-2022-41657?
There are no specific patches or fixes available at the moment for CVE-2022-41657. It's recommended to follow the guidance provided by the vendor or security advisories for updates.