CVE-2023-1137
CVE-2023-1137

6.5MEDIUM

Key Information:

Vendor
Delta Electronics
Status
Infrasuite Device Master
Vendor
CVE Published:
27 March 2023

Summary

A security flaw in the InfraSuite Device Master software from Delta Electronics allows low-level users to extract sensitive files and plaintext credentials belonging to administrator accounts. This vulnerability could lead to unauthorized access and potential malicious activities, including privilege escalation, if exploited. Organizations using affected versions should prioritize applying updates to mitigate risks.

Affected Version(s)

InfraSuite Device Master 0 < 1.0.5

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-0...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.