| |
Vulnerability CVE-2022-41778
Published: 2023-01-13
| Description: |
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-DataCollect service port without proper verification. An attacker could provide malicious serialized objects to execute arbitrary code upon deserialization. |
Type:
CWE-502 (Deserialization of Untrusted Data)
References: |
https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
