Delta Electronics Infrasuite Device Master vulnerabilities, page 2
31 vulnerabilities
Known vulnerabilities in Delta Electronics Infrasuite Device Master, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2023-1142delta electronicsinfrasuite device master+1
EPSS score1.09%
In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could use URL decoding to retrieve system files, credentials, and bypass authentication resulting in privilege escalation.CVE-2023-1133delta electronicsinfrasuite device master+1EPSS score50.05%
Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a vulnerability in which the Device-status service listens on port 10100/ UDP by default. The service accepts the unverified UDP packets and deserializes the content, which could allow an unauthenticated attacker to remotely execute arbitrary code.CVE-2023-1139delta electronicsinfrasuite device master+1EPSS score1.26%
Delta Electronics InfraSuite Device Master versions prior to 1.0.5 are affected by a deserialization vulnerability targeting the Device-gateway service, which could allow deserialization of requests prior to authentication, resulting in remote code execution.CVE-2023-1143delta electronicsinfrasuite device master+1EPSS score0.83%
In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could use Lua scripts, which could allow an attacker to remotely execute arbitrary code.CVE-2023-47279delta electronicsinfrasuite device master+1EPSS score1.12%
In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an unauthenticated attacker to disclose user information through a single UDP packet, obtain plaintext credentials, or perform NTLM relaying.CVE-2023-47207delta electronicsinfrasuite device master+1EPSS score16.57%
In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an unauthenticated attacker to execute code with local administrator privileges.CVE-2023-39226delta electronicsinfrasuite device master+1EPSS score1.18%
In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an unauthenticated attacker to execute arbitrary code through a single UDP packet.CVE-2023-46690delta electronicsinfrasuite device master+1EPSS score1.85%
In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an attacker to write to any file to any location of the filesystem, which could lead to remote code execution.CVE-2023-30765delta electronicsinfrasuite device master+1EPSS score1.97%
Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contain improper access controls that could allow an attacker to alter privilege management configurations, resulting in privilege escalation.CVE-2023-34347delta electronicsinfrasuite device master+1EPSS score0.95%
Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contains classes that cannot be deserialized, which could allow an attack to remotely execute arbitrary code.CVE-2023-34316delta electronicsinfrasuite device master+1EPSS score0.61%
An attacker could bypass the latest Delta Electronics InfraSuite Device Master (versions prior to 1.0.7) patch, which could allow an attacker to retrieve file contents.