{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-21T13:44:37.480","vulnerabilities":[{"cve":{"id":"CVE-2022-41772","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2022-10-31T20:15:13.603","lastModified":"2026-06-17T05:03:48.343","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"\nDelta Electronics InfraSuite Device Master Versions 00.00.01a and prior mishandle .ZIP archives containing characters used in path traversal. This path traversal could result in remote code execution. \n\n"},{"lang":"es","value":"Las versiones 00.00.01a y anteriores de Delta Electronics InfraSuite Device Master manejan mal los archivos .ZIP que contienen caracteres utilizados en el Path Traversal. Este Path Traversal podría resultar en la ejecución remota de código.\n"}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"Delta Electronics","product":"InfraSuite Device Master","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"00.00.01a","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"ics-cert@hq.dhs.gov","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-16T15:52:52.470960Z","id":"CVE-2022-41772","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"ics-cert@hq.dhs.gov","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deltaww:infrasuite_device_master:*:*:*:*:*:*:*:*","versionEndExcluding":"00.00.02a","matchCriteriaId":"0BC08CDF-4EE4-4E6D-AFF0-A4749A91A05D"}]}]}],"references":[{"url":"https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07","source":"ics-cert@hq.dhs.gov","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]}]}}]}