InfraSuite Device Master

13 results · Clear filters · Feed

• Critical 9.8
  CVE-2024-10456 EPSS 18%

  Delta Electronics InfraSuite Device Master Deserialization of Untrusted Data

  Delta Electronics InfraSuite Device Master versions prior to 1.0.12 are affected by a deserialization vulnerability that targets the Device-Gateway, which could allow deserialization of arbitrary .NET objects prior to authentication.

  Delta Electronics InfraSuite Device Master ICS / OT
  Oct 30, 2024
• Critical 9.8
  CVE-2023-47207 EPSS 17%

  Delta Electronics InfraSuite Device Master Deserialization of Untrusted Data

  In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an unauthenticated attacker to execute code with local administrator privileges.

  Delta Electronics InfraSuite Device Master ICS / OT
  Nov 30, 2023
• Critical 9.8
  CVE-2023-39226

  Delta Electronics InfraSuite Device Master Exposed Dangerous Method Or Function

  In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an unauthenticated attacker to execute arbitrary code through a single UDP packet.

  Delta Electronics InfraSuite Device Master ICS / OT
  Nov 30, 2023
• Critical 9.8
  CVE-2023-34347

  ​Delta Electronics InfraSuite Device Master Deserialization of Untrusted Data

  ​Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contains classes that cannot be deserialized, which could allow an attack to remotely execute arbitrary code.

  Delta Electronics InfraSuite Device Master ICS / OT
  Jul 10, 2023
• Critical 9.8
  CVE-2023-1140

  CVE-2023-1140

  Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a vulnerability that could allow an attacker to achieve unauthenticated remote code execution in the context of an administrator.

  Delta Electronics InfraSuite Device Master ICS / OT
  Mar 27, 2023
• Critical 9.8
  CVE-2023-1136

  CVE-2023-1136

  In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an unauthenticated attacker could generate a valid token, which would lead to authentication bypass.

  Delta Electronics InfraSuite Device Master ICS / OT
  Mar 27, 2023
• Critical 9.8
  CVE-2023-1133 Public exploit EPSS 50%

  CVE-2023-1133

  Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a vulnerability in which the Device-status service listens on port 10100/ UDP by default. The service accepts the unverified UDP packets and deserializes the content, which could allow…

  Delta Electronics InfraSuite Device Master ICS / OT
  Mar 27, 2023
• Critical 9.8
  CVE-2022-41778

  Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through…

  Delta Electronics InfraSuite Device Master ICS / OT
  Jan 12, 2023
• Critical 9.8
  CVE-2022-41688

  Delta Electronics InfraSuite Device Master versions 00.00.01a and prior lack proper authentication for functions that c…

  Delta Electronics InfraSuite Device Master ICS / OT
  Oct 31, 2022
• Critical 9.8
  CVE-2022-40202

  The database backup function in Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior lacks proper au…

  Delta Electronics InfraSuite Device Master ICS / OT
  Oct 31, 2022
• Critical 9.8
  CVE-2022-41772 EPSS 25%

  Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior mishandle .ZIP archives containing characters u…

  Delta Electronics InfraSuite Device Master ICS / OT
  Oct 31, 2022
• Critical 9.8
  CVE-2022-41657 EPSS 21%

  Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior allow attacker provided data already serialized…

  Delta Electronics InfraSuite Device Master ICS / OT
  Oct 31, 2022
• Critical 9.8
  CVE-2022-38142 EPSS 19%

  Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through…

  Delta Electronics InfraSuite Device Master ICS / OT
  Oct 31, 2022