Delta Electronics InfraSuite Device Master Gateway Information Disclosure (CVE-2022-41629)

Binary data deltaelectronicsidmcve-2022-41629.nbin...

CVE-2022-41629

Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to access the aprunning endpoint, which could allow an attacker to retrieve any file from the “RunningConfigs” directory. The attacker could then view and modify configuration files such as...

CVE-2022-41629

Delta Electronics InfraSuite Device Master (versions 00.00.01a and prior) contains an unauthenticated access flaw in the aprunning endpoint that can let an attacker read files from the RunningConfigs directory and view/modify configuration files such as UserListInfo.xml, potentially exposing admi...