ID
Product
Infrasuite Device Master
32
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 14High 18Medium 0Low 0
Watch
Add Infrasuite Device Master to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-10456 | 9.8 | Oct 30 | Delta Electronics InfraSuite Device Master Deserialization of Untrusted Data Affected: through 1.0.12 |
| CVE-2023-47207 | 9.8 | Nov 30 | In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an unauthenticated attacker to execute code with local administrator privileges Affected: 1.0.7 |
| CVE-2023-39226 | 9.8 | Nov 30 | In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an unauthenticated attacker to execute arbitrary code through a single UDP packet Affected: 1.0.7 |
| CVE-2023-30765 | 9.8 | Jul 10 | Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contain improper access controls that could allow an attacker to alter privilege management configurations,… Affected: before 1.0.7 |
| CVE-2023-34347 | 9.8 | Jul 10 | Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contains classes that cannot be deserialized, which could allow an attack to remotely execute arbitrary code Affected: before 1.0.7 |
| CVE-2023-1142 | 9.8 | Mar 27 | In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could use URL decoding to retrieve system files, credentials, and bypass authentication… Affected: before 1.0.5 |
| CVE-2023-1140 | 9.8 | Mar 27 | Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a vulnerability that could allow an attacker to achieve unauthenticated remote code execution in the… Affected: before 1.0.5 |
| CVE-2023-1133 | 9.8 | Mar 27 | Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a vulnerability in which the Device-status service listens on port 10100/ UDP by default Affected: before 1.0.5 |
| CVE-2022-40202 | 9.8 | Oct 31 | The database backup function in Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior lacks proper authentication Affected: before 00.00.02a |
| CVE-2022-41772 | 9.8 | Oct 31 | Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior mishandle .ZIP archives containing characters used in path traversal Affected: before 00.00.02a |
| CVE-2022-41657 | 9.8 | Oct 31 | Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior allow attacker provided data already serialized into memory to be used in file operation application… Affected: before 00.00.02a |
| CVE-2022-41779 | 9.8 | Oct 31 | Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize network packets without proper verification Affected: before 00.00.02a |
| CVE-2022-38142 | 9.8 | Oct 31 | Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-Gateway service port without proper verification Affected: before 00.00.02a |
| CVE-2022-41629 | 9.1 | Oct 31 | Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to access the aprunning endpoint, which could allow an attacker to retrieve any… Affected: before 00.00.02a |
Showing 14
