CVE-2022-41644 Information

Description

Delta Electronics InfraSuite Device Master versions 00.00.01a and prior lacks authentication for a function that changes group privileges. An attacker could use this to create a denial-of-service state or escalate their own privileges.

Reference

https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07