CVE-2022-41778
First published: Thu Jan 12 2023(Updated: )
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-DataCollect service port without proper verification. An attacker could provide malicious serialized objects to execute arbitrary code upon deserialization.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Deltaww Infrasuite Device Master | <=00.00.01a | |
| Delta Electronics Version 00.00.01a and prior |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for Delta Electronics InfraSuite Device Master?
The vulnerability ID for Delta Electronics InfraSuite Device Master is CVE-2022-41778.
What is the severity level of CVE-2022-41778?
The severity level of CVE-2022-41778 is critical.
What is the affected software for CVE-2022-41778?
The affected software for CVE-2022-41778 is Delta Electronics InfraSuite Device Master versions 00.00.01a and prior.
How does CVE-2022-41778 work?
CVE-2022-41778 allows an attacker to execute arbitrary code upon deserialization by providing malicious serialized objects.
Is there a fix for CVE-2022-41778?
There is currently no fix available for CVE-2022-41778. It is recommended to follow the guidance provided by the vendor and apply any necessary patches or updates when they become available.
- collector/nvd-index
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/event
- agent/description
- collector/ics-cert-advisory
- source/ICS
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/deltaww
- canonical/deltaww infrasuite device master
- version/deltaww infrasuite device master/00.00.01a
- vendor/delta electronics
- canonical/delta electronics version 00.00.01a and prior