ICSA-23-180-01

icsaUScisa_csaf_ot

Delta Electronics InfraSuite Device Master

Advisory ansehen veröffentlicht 2023-06-29

Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges or remotely execute arbitrary code.

01

beschreibt (3)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2023-34316UShigh7.5—
​An attacker could bypass the latest Delta Electronics InfraSuite Device Master (versions prior to 1.0.7) patch, which could allow an attacker to retrieve file contents.
CVE-2023-30765UScritical9.8Exploit
​Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contain improper access controls that could allow an attacker to alter privilege management configurations, resu…
CVE-2023-34347UScritical9.8—
​Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contains classes that cannot be deserialized, which could allow an attack to remotely execute arbitrary code.…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (6)

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan