CVE-2022-41779 - Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize network packets without proper verification

Back Back to CVE browser

CRITICAL

Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize network packets without proper verification

Published Oct 31, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 1.19%

Description

Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize network packets without proper verification. If the device connects to an attacker-controlled server, the attacker could send maliciously crafted packets that would be deserialized and executed, leading to remote code execution.

Affected products

Vendor Delta Electronics Product InfraSuite Device Master Default
unaffected
Affected
- ≥ 0, ≤ 00.00.01a

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Delta Electronics	InfraSuite Device Master	unaffected	Affected ≥ 0, ≤ 00.00.01a

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-502

Deserialization of Untrusted Data

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-44948
Advisory
https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07
government-resourcePatchThird Party AdvisoryUS Government Resource

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-44948		Advisory
https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07		government-resourcePatchThird Party AdvisoryUS Government Resource

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner icscert

Published Oct 31, 2022

Updated Apr 16, 2025

Reserved Sep 29, 2022

Link CVE-2022-41779

CISA Vulnrichment

Updated Apr 16, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-41779

Red Hat

No data

ENISA EUVD

Assigner icscert

Published Oct 31, 2022

Updated Apr 16, 2025

Link EUVD-2022-44948

GitHub

No data