Description
Delta Electronics InfraSuite Device Master versions prior to 1.0.12 are affected by a deserialization vulnerability that targets the Device-Gateway, which could allow deserialization of arbitrary .NET objects prior to authentication.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Delta Electronics | InfraSuite Device Master | ≤ 1.0.12 | — |
Advisories 1
- ICSA-24-303-03 Delta Electronics InfraSuite Device Master CISA ICS & IT advisories · Oct 29, 2024