Skip to content
OpenAdvisories
Critical ICSA-23-331-01 4 CVEs

Delta Electronics InfraSuite Device Master

Published Nov 28, 2023 · Updated May 6, 2025 · Revision 2

Vendor: Delta Electronics Product: InfraSuite Device Master

Summary

Successful exploitation of these vulnerabilities could allow an attacker to remotely execute arbitrary code and obtain plaintext credentials.

Vulnerabilities 4

  • Critical 9.8
    CVE-2023-39226

    Delta Electronics InfraSuite Device Master Exposed Dangerous Method Or Function

    In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an unauthenticated attacker to execute arbitrary code through a single UDP packet.

    Delta Electronics InfraSuite Device Master ICS / OT
  • Critical 9.8
    CVE-2023-47207 EPSS 17%

    Delta Electronics InfraSuite Device Master Deserialization of Untrusted Data

    In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an unauthenticated attacker to execute code with local administrator privileges.

    Delta Electronics InfraSuite Device Master ICS / OT
  • High 8.8
    CVE-2023-46690

    Delta Electronics InfraSuite Device Master Path Traversal

    In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an attacker to write to any file to any location of the filesystem, which could lead to remote code execution.

    Delta Electronics InfraSuite Device Master ICS / OT
  • High 7.5
    CVE-2023-47279

    Delta Electronics InfraSuite Device Master Path Traversal

    In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an unauthenticated attacker to disclose user information through a single UDP packet, obtain plaintext credentials, or perform NTLM relaying.

    Delta Electronics InfraSuite Device Master ICS / OT

Revision history

  1. #2

    Revision - Fixing typos

  2. #1

    Initial Publication

References