Metasploit Weekly Wrap-Up

MOVEit It has been a busy few weeks in the security space; the MOVEit vulnerability filling our news feeds with dancing lemurs and a Barracuda vulnerability that has us all wondering how many shredders out there can handle a 1U appliance. Despite those very worthwhile distractions, Metasploit has...

Delta Electronics InfraSuite Device Master Deserialization

Delta Electronics InfraSuite Device Master versions below v1.0.5 have an unauthenticated .NET deserialization vulnerability within the 'ParseUDPPacket' method of the 'Device-Gateway-Status' process. The 'ParseUDPPacket' method reads user-controlled packet data and eventually calls...

Delta Electronics InfraSuite Device Master Deserialization Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Delta Electronics InfraSuite Device Master Deserialization', 'Description' = %q Delta Electronics InfraSuite Device Master versions below v1.0.5...

Delta Electronics InfraSuite Device Master Deserialization

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Delta Electronics InfraSuite Device Master Deserialization', 'Description' = %q Delta Electronics InfraSuite Device Master versions below v1.0.5...

Delta Electronics InfraSuite Device Master Gateway Deserialization of Untrusted Data (CVE-2023-1133)

Binary data deltaelectronicsidmcve-2023-1133.nbin...

CVE-2023-1133

Summary of CVE-2023-1133 (Delta Electronics InfraSuite Device Master) Affected software: InfraSuite Device Master versions prior to 1.0.5. The vulnerability targets the Device-status service, which by default listens on UDP port 10100. The service deserializes unverified UDP packets, allowing an ...

CVE-2023-1133

creationtimestamp| type| source ---|---|--- 2023-03-23 14:19:08+00:00| seen| https://t.me/truesecator/4205 2023-03-27 18:20:10+00:00| seen| https://t.me/cibsecurity/60787 2023-06-08 13:56:26+00:00| seen|...