China National Vulnerability DatabaseCNVD-2023-23887Delta Electronics InfraSuite Device Master Deserialization Vulnerability (CNVD-2023-23887)
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Delta Electronics InfraSuite Device Master is an appliance from Delta Electronics used to simplify and automate critical device monitoring.A deserialization vulnerability exists in versions prior to Delta Electronics InfraSuite Device Master 1.0.5. An unauthenticated attacker could exploit this vulnerability to remotely execute arbitrary code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| delta electronics infrasuite device master | lt | 1.0.5 |
Related
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H