Critical · 9.8 CVE-2022-41657 EUVD-2022-44844GHSA-qpcq-4w33-hhvh

Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior allow attacker provided data already serialized into memory to be u…

Published Oct 31, 2022 · Updated Apr 16, 2025 · Assigned by icscert

Vendor: Delta Electronics Product: InfraSuite Device Master Category: ICS / OT

Description

Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior allow attacker provided data already serialized into memory to be used in file operation application programmable interfaces (APIs). This could create arbitrary files, which could be used in API operations and could ultimately result in remote code execution.

Affected products

Vendor	Product	Affected	Fixed
Delta Electronics	InfraSuite Device Master	≤ 00.00.01a	—

Advisories 1

ICSA-22-298-07 Delta Electronics InfraSuite Device Master CISA ICS & IT advisories · Jan 18, 2023

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07 government-resource