CVE-2023-1139
CVE-2023-1139

8.8HIGH

Key Information:

Vendor
Delta Electronics
Status
Infrasuite Device Master
Vendor
CVE Published:
27 March 2023

Summary

The Delta Electronics InfraSuite Device Master versions prior to 1.0.5 are vulnerable to a deserialization flaw within the Device-gateway service. This vulnerability allows an attacker to craft malicious requests that can be deserialized before any authentication is carried out. Successful exploitation may lead to remote code execution, thereby compromising the integrity and security of affected systems.

Affected Version(s)

InfraSuite Device Master 0 < 1.0.5

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-0...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.