Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize network packets without proper verification. If the device connects to an attacker-controlled server, the attacker could send maliciously crafted packets that would be deserialized and executed, leading to remote code execution.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vulnerability Type
可信数据的反序列化
Vulnerability Title
Delta Electronics InfraSuite Device Master 代码问题漏洞
Vulnerability Description
Delta Electronics InfraSuite Device Master是中国台湾台达电子（Delta Electronics）公司的用于简化和自动化关键设备监控的设备。 Delta Electronics InfraSuite Device Master 00.00.01a及之前版本存在代码问题漏洞，该漏洞源于在没有适当验证的情况下反序列化网络数据包，如果设备连接到攻击者控制的服务器，攻击者可以发送恶意制作的数据包，这些数据包将被反序列化和执行，从而导致远程代码执行。
CVSS Information
N/A
Vulnerability Type
N/A