Description
Delta Electronics InfraSuite Device Master versions prior to 1.0.5 are affected by a deserialization vulnerability targeting the Device-DataCollect service, which could allow deserialization of requests prior to authentication, resulting in remote code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Delta Electronics | InfraSuite Device Master | < 1.0.5 | 1.0.5 |
Advisories 1
- ICSA-23-080-02 Delta Electronics InfraSuite Device Master CISA ICS & IT advisories · Mar 29, 2023