Privilege Escalation Vulnerability in Delta Electronics InfraSuite Device Master

CVE-2023-0444

What is CVE-2023-0444?

A privilege escalation vulnerability has been identified in Delta Electronics InfraSuite Device Master 00.00.02a. This flaw allows a default user, categorized as a 'Read Only User', to access the password of the 'Administrator' account. Consequently, this could enable a lower privileged user to log in with elevated permissions, posing a serious security risk. Organizations utilizing this product should ensure proper access controls are enforced to mitigate potential exploitation of this vulnerability.

References