ICSA-23-180-01

icsaUScisa_csaf_ot

Delta Electronics InfraSuite Device Master

view advisory published 2023-06-29

Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges or remotely execute arbitrary code.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2023-34316UShigh7.5—
​An attacker could bypass the latest Delta Electronics InfraSuite Device Master (versions prior to 1.0.7) patch, which could allow an attacker to retrieve file contents.
CVE-2023-30765UScritical9.8Exploit
​Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contain improper access controls that could allow an attacker to alter privilege management configurations, resu…
CVE-2023-34347UScritical9.8—
​Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contains classes that cannot be deserialized, which could allow an attack to remotely execute arbitrary code.…
02

references

External citations — patches, advisories, analysis.

03

remediations (6)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan