Skip to content
OpenAdvisories
Critical ICSA-23-180-01 3 CVEs

Delta Electronics InfraSuite Device Master

Published Jun 29, 2023 · Updated Jun 29, 2023

Vendor: Delta Electronics Product: InfraSuite Device Master

Summary

Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges or remotely execute arbitrary code.

Vulnerabilities 3

  • Critical 9.8
    CVE-2023-34347

    ​Delta Electronics InfraSuite Device Master Deserialization of Untrusted Data

    ​Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contains classes that cannot be deserialized, which could allow an attack to remotely execute arbitrary code.

    Delta Electronics InfraSuite Device Master ICS / OT
  • High 8.8
    CVE-2023-30765 Public exploit

    ​Delta Electronics InfraSuite Device Master Improper Access Control

    ​Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contain improper access controls that could allow an attacker to alter privilege management configurations, resulting in privilege escalation.

    Delta Electronics InfraSuite Device Master ICS / OT
  • Medium 6.5
    CVE-2023-34316

    Delta Electronics InfraSuite Device Master Improper Access Control

    ​An attacker could bypass the latest Delta Electronics InfraSuite Device Master (versions prior to 1.0.7) patch, which could allow an attacker to retrieve file contents.

    Delta Electronics InfraSuite Device Master ICS / OT

Revision history

  1. #1

    Initial Publication

References