InfraSuite Device Master vulnerabilities | LiveThreat CVE Feed

Product

InfraSuite Device Master

by Delta Electronics · last CVE Oct 30, 2024

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities10 In the news0 Timeline

Severity mix

Critical 7High 3Medium 0Low 0

Severity

All severities10 Critical7 High3 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add InfraSuite Device Master to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-10456	9.8	18%	Oct 30	Delta Electronics InfraSuite Device Master Deserialization of Untrusted Data Affected: through 1.0.12
CVE-2022-40202	9.8	2%	Oct 31	The database backup function in Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior lacks proper authentication Affected: through 00.00.01a
CVE-2022-41772	9.8	25%	Oct 31	Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior mishandle .ZIP archives containing characters used in path traversal Affected: through 00.00.01a
CVE-2022-41657	9.8	21%	Oct 31	Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior allow attacker provided data already serialized into memory to be used in file operation application… Affected: through 00.00.01a
CVE-2022-41779	9.8	1%	Oct 31	Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize network packets without proper verification Affected: through 00.00.01a
CVE-2022-38142	9.8	19%	Oct 31	Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-Gateway service port without proper verification Affected: through 00.00.01a
CVE-2022-41629	9.1	1%	Oct 31	Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to access the aprunning endpoint, which could allow an attacker to retrieve any… Affected: through 00.00.01a
CVE-2022-41644	8.8	1%	Oct 31	Delta Electronics InfraSuite Device Master versions 00.00.01a and prior lacks authentication for a function that changes group privileges Affected: through 00.00.01a
CVE-2022-41776	7.5	1%	Oct 31	Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to trigger the WriteConfiguration method, which could allow an attacker to… Affected: through 00.00.01a
CVE-2022-41688	7.5	1%	Oct 31	Delta Electronics InfraSuite Device Master versions 00.00.01a and prior lack proper authentication for functions that create and modify user groups Affected: through 00.00.01a