CVE-2022-41776
First published: Mon Oct 31 2022(Updated: )
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to trigger the WriteConfiguration method, which could allow an attacker to provide new values for user configuration files such as UserListInfo.xml. This could lead to the changing of administrative passwords.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Delta Electronics Version 00.00.01a and prior | ||
| Delta Electronics InfraSuite Device Master | <00.00.02a |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for Delta Electronics InfraSuite Device Master?
The vulnerability ID for Delta Electronics InfraSuite Device Master is CVE-2022-41776.
What is the severity of CVE-2022-41776?
The severity of CVE-2022-41776 is high with a CVSS score of 7.5.
What is the affected software version for CVE-2022-41776?
The affected software version for CVE-2022-41776 is Delta Electronics InfraSuite Device Master versions 00.00.01a and prior.
What could an attacker do with CVE-2022-41776?
An attacker could trigger the WriteConfiguration method, potentially allowing them to modify user configuration files such as UserListInfo.xml and change administrative privileges.
Is there a fix for CVE-2022-41776?
At the moment, there is no available fix for CVE-2022-41776. It is recommended to follow the mitigation steps provided by the vendor and monitor for any updates or patches.
- agent/type
- agent/references
- agent/weakness
- agent/remedy
- agent/author
- collector/ics-cert-advisory
- source/ICS
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/event
- agent/description
- agent/first-publish-date
- agent/trending
- collector/nvd-index
- agent/softwarecombine
- agent/tags
- agent/source
- vendor/delta electronics
- canonical/delta electronics version 00.00.01a and prior
- vendor/deltaww
- canonical/delta electronics infrasuite device master