CVE-2022-41657

critical · 9.8

Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior allow attacker provided data already serialized into memory to be used in file operation application programmable interfaces (APIs). This could create arbitrary files, which could be used in API operations and could ultimately result in remote code execution.

9.8

CVSS

20.9%

EPSS (exploit prob.)

97th

EPSS percentile

2022-10-31

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-22

Affected products

Vendor	Product	Affected versions
deltaww	infrasuite_device_master	< 00.00.02a

Check a specific version with /api/v1/cve/match.

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07
https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2022-41657