CVE-2022-41776: High severity Deltaww Infrasuite Device Master vulnerability
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to trigger the WriteConfiguration method, which could allow an attacker to provide new values for user configuration files such as UserListInfo.xml. This could lead to the changing of administrative passwords.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for Delta Electronics InfraSuite Device Master?
The vulnerability ID for Delta Electronics InfraSuite Device Master is CVE-2022-41776.
What is the severity of CVE-2022-41776?
The severity of CVE-2022-41776 is high with a CVSS score of 7.5.
What is the affected software version for CVE-2022-41776?
The affected software version for CVE-2022-41776 is Delta Electronics InfraSuite Device Master versions 00.00.01a and prior.
What could an attacker do with CVE-2022-41776?
An attacker could trigger the WriteConfiguration method, potentially allowing them to modify user configuration files such as UserListInfo.xml and change administrative privileges.
Is there a fix for CVE-2022-41776?
At the moment, there is no available fix for CVE-2022-41776. It is recommended to follow the mitigation steps provided by the vendor and monitor for any updates or patches.