Delta Electronics InfraSuite Device Master Access Control Error Vulnerability (CNVD-2023-23886)

Delta Electronics InfraSuite Device Master is an appliance from Delta Electronics used to simplify and automate critical device monitoring. versions prior to Delta Electronics InfraSuite Device Master 1.0.5 are vulnerable to an access control error vulnerability, which could be exploited by an attacker to extract the administrator user’s files and plaintext credentials, resulting in an escalation of privileges.