Vulnerabilities > CVE-2022-41779 - Deserialization of Untrusted Data vulnerability in Deltaww Infrasuite Device Master 00.00.01A
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize network packets without proper verification. If the device connects to an attacker-controlled server, the attacker could send maliciously crafted packets that would be deserialized and executed, leading to remote code execution.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |