Exploit for Improper Privilege Management in Deltaww Infrasuite_Device_Master

CVE-2023-30765 CVE-2023-30765 / ZDI-23-905 - Delta Electronic...

CVE-2023-30765

​Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contain improper access controls that could allow an attacker to alter privilege management configurations, resulting in privilege escalation...

CVE-2023-30765

​Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contain improper access controls that could allow an attacker to alter privilege management configurations, resulting in privilege escalation...

CVE-2023-34316

​An attacker could bypass the latest Delta Electronics InfraSuite Device Master versions prior to 1.0.7 patch, which could allow an attacker to retrieve file contents...

Privilege escalation

?Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contain improper access controls that could allow an attacker to alter privilege management configurations, resulting in privilege escalation...

Authentication flaw

?An attacker could bypass the latest Delta Electronics InfraSuite Device Master versions prior to 1.0.7 patch, which could allow an attacker to retrieve file contents...

CVE-2023-34347

​Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contains classes that cannot be deserialized, which could allow an attack to remotely execute arbitrary code...

Code injection

?Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contains classes that cannot be deserialized, which could allow an attack to remotely execute arbitrary code...

CVE-2023-30765

CVE-2023-30765 concerns Delta Electronics InfraSuite Device Master, prior to version 1.0.7, with improper access controls that could allow an attacker to alter privilege management configurations and escalate privileges. Connected sources confirm the affected product and root cause (improper acce...

CVE-2023-34316 Delta Electronics InfraSuite Device Master Improper Access Control

​An attacker could bypass the latest Delta Electronics InfraSuite Device Master versions prior to 1.0.7 patch, which could allow an attacker to retrieve file contents...

CVE-2023-34316

Delta Electronics InfraSuite Device Master (versions prior to 1.0.7) is affected by CVE-2023-34316 (Improper Access Control). The vulnerability could allow an attacker to bypass patches and retrieve file contents due to insufficient access control on the device. Delta Electronics has provided a f...

CVE-2023-34347

Delta Electronics InfraSuite Device Master is affected by CVE-2023-34347. Versions prior to 1.0.7 contain classes that cannot be deserialized, enabling remote code execution via deserialization of untrusted data. The vulnerability affects the Device Master’s deserialization mechanism and is corro...

CVE-2023-34347 ​Delta Electronics InfraSuite Device Master Deserialization of Untrusted Data

​Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contains classes that cannot be deserialized, which could allow an attack to remotely execute arbitrary code...

Delta Electronics InfraSuite Device Master 访问控制错误漏洞

Delta Electronics InfraSuite Device Master is a device used to simplify and automate the monitoring of critical equipment from Delta Electronics, Taiwan, China. An access control error vulnerability exists in Delta Electronics InfraSuite Device Master versions prior to 1.0.7. An attacker could...

Delta Electronics InfraSuite Device Master 访问控制错误漏洞

Delta Electronics InfraSuite Device Master is a device used to simplify and automate critical device monitoring by Delta Electronics of Taiwan, China. An Access Control Error vulnerability exists in Delta Electronics InfraSuite Device Master versions prior to 1.0.7 that stems from incorrect acces...

CVE-2023-34347: Deserialization of Untrusted Data

​Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contains classes that cannot be deserialized, which could allow an attack to remotely execute arbitrary code...

CVE-2023-34316: Files or Directories Accessible to External Parties

​An attacker could bypass the latest Delta Electronics InfraSuite Device Master versions prior to 1.0.7 patch, which could allow an attacker to retrieve file contents...

Delta Electronics InfraSuite Device Master 代码问题漏洞

Delta Electronics InfraSuite Device Master is a device used to simplify and automate critical device monitoring by Delta Electronics of Taiwan, China. A code issue vulnerability exists in Delta Electronics InfraSuite Device Master versions prior to 1.0.7 that stems from the inclusion of classes...

CVE-2023-30765: Improper Privilege Management

​Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contain improper access controls that could allow an attacker to alter privilege management configurations, resulting in privilege escalation...

Delta Electronics InfraSuite Device Master modifyusergroup Improper Access Control Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of Delta Electronics InfraSuite Device Master. Authentication is required to exploit this vulnerability. The specific flaw exists within the modifyusergroup endpoint. The issue results from improper access...