Unauthenticated Access Vulnerability in Delta Electronics InfraSuite Device Master

CVE-2022-41629

What is CVE-2022-41629?

Delta Electronics InfraSuite Device Master versions 00.00.01a and earlier are vulnerable to unauthenticated access, allowing remote attackers to interact with the aprunning endpoint. This vulnerability exposes the 'RunningConfigs' directory, permitting unauthorized retrieval of sensitive files, including configuration files like UserListInfo.xml. As a result, attackers could potentially access and modify critical configuration settings, including administrative passwords, posing significant security risks.

References