by Kastro
Paper/Archive/CVE-2023-1142

CVE-2023-1142

Delta Electronics InfraSuite Device Master — CVE-2023-1142

EPSS 1%CVSS 9.8
critical.is priorityof 100
43
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 65.4.654 × 2013.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could use URL decoding to retrieve system files, credentials, and bypass authentication resulting in privilege escalation.

Affected

ProductAffectedFixed inSource
InfraSuite Device Master< 1.0.51.0.5CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
icscert (CNA)7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refcisa.gov/news-events/ics-advisories/icsa-23-080-02