by Kastro
Paper/Archive/CVE-2023-30765

CVE-2023-30765

Delta Electronics Infrasuite Device Master — ​Delta Electronics InfraSuite Device Master Improper Access Control

EPSS 2%CVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 80.6.806 × 2016.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

​Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contain improper access controls that could allow an attacker to alter privilege management configurations, resulting in privilege escalation.

Affected

ProductAffectedFixed inSource
Infrasuite Device Master< v1.0.7v1.0.7CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
icscert (CNA)8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refcisa.gov/news-events/ics-advisories/icsa-23-180-01