Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rmhf-57rf-f2p9

Опубликовано: 01 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-Gateway service port without proper verification. An attacker could provide malicious serialized objects to execute arbitrary code upon deserialization.

Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-Gateway service port without proper verification. An attacker could provide malicious serialized objects to execute arbitrary code upon deserialization.

EPSS

Процентиль: 66%
0.00523
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-502

Связанные уязвимости

CVSS3: 9.8
nvd
больше 3 лет назад

Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-Gateway service port without proper verification. An attacker could provide malicious serialized objects to execute arbitrary code upon deserialization.

EPSS

Процентиль: 66%
0.00523
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-502