Security Advisory

CVE-2022-38142

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-10-31 19:04:37
Last updated 2025-04-16 16:07:06
Assigner icscert
State PUBLISHED

Description

Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-Gateway service port without proper verification. An attacker could provide malicious serialized objects to execute arbitrary code upon deserialization.