Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-10456 EUVD-2024-33131GHSA-r2q9-52vc-q982

Delta Electronics InfraSuite Device Master Deserialization of Untrusted Data

Published Oct 30, 2024 · Updated Oct 30, 2024 · Assigned by icscert

Description

Delta Electronics InfraSuite Device Master versions prior to 1.0.12 are affected by a deserialization vulnerability that targets the Device-Gateway, which could allow deserialization of arbitrary .NET objects prior to authentication.

Affected products

VendorProductAffectedFixed
Delta Electronics InfraSuite Device Master ≤ 1.0.12 —

Advisories 1

References