CVE-2022-41644: Deltaww Infrasuite Device Master

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Delta Electronics InfraSuite Device Master versions 00.00.01a and prior lacks authentication for a function that changes group privileges. An attacker could use this to create a denial-of-service state or escalate their own privileges.

Affected products

  • Deltaww Infrasuite Device Master: before 00.00.02a (fixed in 00.00.02a)

Published 2022-10-31. Last modified 2026-06-17.