Deltaww Infrasuite Device Master vulnerabilities, page 2
31 vulnerabilities
Known vulnerabilities in Deltaww Infrasuite Device Master, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2023-1133delta electronicsinfrasuite device master+1
EPSS score50.05%
Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a vulnerability in which the Device-status service listens on port 10100/ UDP by default. The service accepts the unverified UDP packets and deserializes the content, which could allow an unauthenticated attacker to remotely execute arbitrary code.CVE-2023-1139delta electronicsinfrasuite device master+1EPSS score1.26%
Delta Electronics InfraSuite Device Master versions prior to 1.0.5 are affected by a deserialization vulnerability targeting the Device-gateway service, which could allow deserialization of requests prior to authentication, resulting in remote code execution.CVE-2023-1143delta electronicsinfrasuite device master+1EPSS score0.83%
In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could use Lua scripts, which could allow an attacker to remotely execute arbitrary code.CVE-2023-47279delta electronicsinfrasuite device master+1EPSS score1.12%
In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an unauthenticated attacker to disclose user information through a single UDP packet, obtain plaintext credentials, or perform NTLM relaying.CVE-2023-47207delta electronicsinfrasuite device master+1EPSS score16.57%
In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an unauthenticated attacker to execute code with local administrator privileges.CVE-2023-0444deltawwinfrasuite_device_masterEPSS score0.99%
A privilege escalation vulnerability exists in Delta Electronics InfraSuite Device Master 00.00.02a. A default user 'User', which is in the 'Read Only User' group, can view the password of another default user 'Administrator', which is in the 'Administrator' group. This allows any lower privileged user to log in as an administrator.CVE-2023-39226delta electronicsinfrasuite device master+1EPSS score1.18%
In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an unauthenticated attacker to execute arbitrary code through a single UDP packet.CVE-2023-46690delta electronicsinfrasuite device master+1EPSS score1.85%
In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an attacker to write to any file to any location of the filesystem, which could lead to remote code execution.CVE-2023-30765delta electronicsinfrasuite device master+1EPSS score1.97%
Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contain improper access controls that could allow an attacker to alter privilege management configurations, resulting in privilege escalation.CVE-2023-34347delta electronicsinfrasuite device master+1EPSS score0.95%
Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contains classes that cannot be deserialized, which could allow an attack to remotely execute arbitrary code.CVE-2023-34316delta electronicsinfrasuite device master+1EPSS score0.61%
An attacker could bypass the latest Delta Electronics InfraSuite Device Master (versions prior to 1.0.7) patch, which could allow an attacker to retrieve file contents.