CVE-2022-41779: Deltaww Infrasuite Device Master

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize network packets without proper verification. If the device connects to an attacker-controlled server, the attacker could send maliciously crafted packets that would be deserialized and executed, leading to remote code execution.

Affected products

• Deltaww Infrasuite Device Master: before 00.00.02a (fixed in 00.00.02a)

Published 2022-10-31. Last modified 2026-06-17.