Description
Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contains an improper access control vulnerability in which an attacker can use the Device-Gateway service and bypass authorization, which could result in privilege escalation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Delta Electronics | InfraSuite Device Master | < 1.0.5 | 1.0.5 |
Advisories 1
- ICSA-23-080-02 Delta Electronics InfraSuite Device Master CISA ICS & IT advisories · Mar 29, 2023