CVE-2022-41776 — Delta Electronics / InfraSuite Device Master

CVE-2022-41776

Delta Electronics / InfraSuite Device Master PUBLISHED

Description (CNA)

Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to trigger the WriteConfiguration method, which could allow an attacker to provide new values for user configuration files such as UserListInfo.xml. This could lead to the changing of administrative passwords.

Affected (CNA)

Vendor / product	Versions
Delta Electronics / InfraSuite Device Master	affected 0 through 00.00.01a

CWE

CWE-306

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07

CISA-ADP

No English description supplied.

No references supplied.