ZeroHour

CVE-2023-1142

CVSS 3.1
9.8 critical
EPSS
1%p63
Published
()
Modified
Description

In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could use URL decoding to retrieve system files, credentials, and bypass authentication resulting in privilege escalation.

Vendors
deltaww
Products
infrasuite device master
Weakness
CWE-22
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.