Skip to content
OpenAdvisories
High · 7.5 CVE-2023-1142 EUVD-2023-23425GHSA-4hwr-fj9w-xmp9

CVE-2023-1142

Published Mar 27, 2023 · Updated Jan 16, 2025 · Assigned by icscert

Description

In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could use URL decoding to retrieve system files, credentials, and bypass authentication resulting in privilege escalation.

Affected products

VendorProductAffectedFixed
Delta Electronics InfraSuite Device Master < 1.0.5 1.0.5

Advisories 1

References