ICSA-23-331-01

icsaUScisa_csaf_ot

Delta Electronics InfraSuite Device Master

view advisory published 2023-11-28

Successful exploitation of these vulnerabilities could allow an attacker to remotely execute arbitrary code and obtain plaintext credentials.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2023-47279UShigh7.5—
In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an unauthenticated attacker to disclose user information through a single UDP packet, obta…
CVE-2023-47207UScritical9.8—
In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an unauthenticated attacker to execute code with local administrator privileges.
CVE-2023-46690UShigh8.8—
In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an attacker to write to any file to any location of the filesystem, which could lead to re…
CVE-2023-39226UScritical9.8—
In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an unauthenticated attacker to execute arbitrary code through a single UDP packet.
02

references

External citations — patches, advisories, analysis.

03

remediations (4)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan