CVE-2023-34316

Delta Electronics InfraSuite Device Master Improper Access Control

CVSS 6.5 MEDIUMEPSS 0.6%CWE-552

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 6.5EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

10 Jul 2023Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

An attacker could bypass the latest Delta Electronics InfraSuite Device Master (versions prior to 1.0.7) patch, which could allow an attacker to retrieve file contents.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

Delta Electronics · Infrasuite Device Master

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-01