CVE-2023-1141: delta electronics infrasuite device master Command Injection

Vulnerability summary

CVE-2023-1141 is a high (CVSS 8.8) Command Injection vulnerability in delta electronics infrasuite device master. EPSS estimates a 1.58% chance of exploitation in the next 30 days, higher than 75.3% of scored vulnerabilities.

Timeline

1. 27-03-2023
   PublishedVulnerability first disclosed.
2. 16-01-2025
   Last modifiedVulnerability information updated.

Description

Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a command injection vulnerability that could allow an attacker to inject arbitrary commands, which could result in remote code execution.

• CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.