Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2022-10-31	CVE-2022-41629	Unspecified vulnerability in Deltaww Infrasuite Device Master 00.00.01A Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to access the aprunning endpoint, which could allow an attacker to retrieve any file from the “RunningConfigs” directory. network low complexity deltaww critical	9.1
2022-10-31	CVE-2022-40202	Unspecified vulnerability in Deltaww Infrasuite Device Master 00.00.01A The database backup function in Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior lacks proper authentication. network low complexity deltaww critical	9.8
2022-10-31	CVE-2022-38142	Unspecified vulnerability in Deltaww Infrasuite Device Master 00.00.01A Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-Gateway service port without proper verification. network low complexity deltaww critical	9.8