CVE-2022-41772 - Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior mishandle .ZIP archives containing characters used in path traversal

Back Back to CVE browser

CRITICAL

Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior mishandle .ZIP archives containing characters used in path traversal

Published Oct 31, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 24.95%

Description

Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior mishandle .ZIP archives containing characters used in path traversal. This path traversal could result in remote code execution.

Affected products

Vendor Delta Electronics Product InfraSuite Device Master Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=00.00.01a

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Delta Electronics

InfraSuite Device Master

unaffected

Version	Status	Constraints
0	affected	<=00.00.01a

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (1)

https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07
government-resourcePatchThird Party AdvisoryUS Government Resource

Link	Providers	Tags
https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07		government-resourcePatchThird Party AdvisoryUS Government Resource

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner icscert

Published Oct 31, 2022

Updated Apr 16, 2025

Reserved Sep 29, 2022

Link CVE-2022-41772

CISA Vulnrichment

Updated Apr 16, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-41772

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-41772