Description (CNA)
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-Gateway service port without proper verification. An attacker could provide malicious serialized objects to execute arbitrary code upon deserialization.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Delta Electronics / InfraSuite Device Master | affected 0 through 00.00.01a |
CWE
CWE-502
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.