Delta Electronics InfraSuite Device Master

🗓️ 29 Mar 2023 16:33:08Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 56 Views

Delta Electronics InfraSuite Device Master v1.0.5 and prior - critical vulnerabilities, allows unauthenticated remote code execution, privilege escalation, plaintext credential retrieval

Reporter	Title	Published	Views	Family All 186
0day.today	Delta Electronics InfraSuite Device Master Deserialization Exploit	8 Jun 202300:00	–	zdt
BDU FSTEC	The vulnerability of the Delta Electronics InfraSuite Device Master software in monitoring devices in real time lies in the lack of authentication for a critical function, allowing a perpetrator to execute arbitrary code.	27 Mar 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring lies in its ability to restore unreliable data stored in memory, allowing an attacker to execute arbitrary code.	4 Apr 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Delta Electronics InfraSuite Device Master software in monitoring devices in real time, due to deficiencies in the deserialization mechanism, allows a perpetrator to execute arbitrary code.	10 Apr 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Delta Electronics InfraSuite Device Master software in monitoring devices in real time, due to deficiencies in the deserialization mechanism, allows a perpetrator to execute arbitrary code.	10 Apr 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Delta Electronics InfraSuite Device Master software in real-time device monitoring, related to errors in code generation, allows a perpetrator to execute arbitrary codes.	17 Apr 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Delta Electronics InfraSuite Device Master software in monitoring devices in real time, related to the lack of measures taken to clean data at the management level, allows a perpetrator to execute arbitrary codes.	17 Apr 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring, due to deficiencies in access control, allows unauthorized access by attackers to configuration files.	17 Apr 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Delta Electronics InfraSuite Device Master software in monitoring devices in real time, due to insufficient validation of input data, allows attackers to exploit their privileges.	17 Apr 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring lies in the improper configuration of the catalog resolution setting, which allows attackers to escalate their privileges.	17 Apr 202300:00	–	bdu_fstec

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-080-02.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-080-02
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
us-cert	www.us-cert.cisa.gov/ics/Recommended-Practices
cisa	www.cisa.gov/ics
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014

29 Mar 2023 16:33Current

9.9High risk

Vulners AI Score9.9

CVSS 3.19.8

EPSS0.5005

SSVC