CVE-2023-0444

—

CVSS 3.1

8.8 high

EPSS

<1%p60

Published

Jan 26, 2023 (Jan 26, 2023)

Modified

Jun 17, 2026

Description

A privilege escalation vulnerability exists in Delta Electronics InfraSuite Device Master 00.00.02a. A default user 'User', which is in the 'Read Only User' group, can view the password of another default user 'Administrator', which is in the 'Administrator' group. This allows any lower privileged user to log in as an administrator.

Vendors: deltaww
Products: infrasuite device master
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.