Critical · 9.8 CVE-2022-41772 EUVD-2022-44943GHSA-w68j-67vx-j26g

Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior mishandle .ZIP archives containing characters used in path traversa…

Published Oct 31, 2022 · Updated Apr 16, 2025 · Assigned by icscert

Vendor: Delta Electronics Product: InfraSuite Device Master Category: ICS / OT

Description

Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior mishandle .ZIP archives containing characters used in path traversal. This path traversal could result in remote code execution.

Affected products

Vendor	Product	Affected	Fixed
Delta Electronics	InfraSuite Device Master	≤ 00.00.01a	—

Advisories 1

ICSA-22-298-07 Delta Electronics InfraSuite Device Master CISA ICS & IT advisories · Jan 18, 2023

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07 government-resource