Vulnerabilities > Deltaww > Infrasuite Device Master

DATE CVE VULNERABILITY TITLE RISK
2023-11-30 CVE-2023-47279 Path Traversal vulnerability in Deltaww Infrasuite Device Master 1.0.7
In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an unauthenticated attacker to disclose user information through a single UDP packet, obtain plaintext credentials, or perform NTLM relaying.
network
low complexity
deltaww CWE-22
7.5
7.5
2023-11-30 CVE-2023-39226 Unspecified vulnerability in Deltaww Infrasuite Device Master 1.0.7
In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an unauthenticated attacker to execute arbitrary code through a single UDP packet.
network
low complexity
deltaww
critical
 9.8
9.8
2023-11-30 CVE-2023-46690 Path Traversal vulnerability in Deltaww Infrasuite Device Master 1.0.7
In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an attacker to write to any file to any location of the filesystem, which could lead to remote code execution.
network
low complexity
deltaww CWE-22
8.8
8.8
2023-11-30 CVE-2023-47207 Deserialization of Untrusted Data vulnerability in Deltaww Infrasuite Device Master 1.0.7
In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an unauthenticated attacker to execute code with local administrator privileges.
network
low complexity
deltaww CWE-502
critical
 9.8
9.8
2023-07-10 CVE-2023-30765 Improper Access Control vulnerability in Deltaww Infrasuite Device Master 00.00.01A/00.00.02A/1.0.5
?Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contain improper access controls that could allow an attacker to alter privilege management configurations, resulting in privilege escalation.
network
low complexity
deltaww CWE-284
critical
 9.8
9.8
2023-07-10 CVE-2023-34316 Improper Access Control vulnerability in Deltaww Infrasuite Device Master 00.00.01A/00.00.02A/1.0.5
?An attacker could bypass the latest Delta Electronics InfraSuite Device Master (versions prior to 1.0.7) patch, which could allow an attacker to retrieve file contents.
network
low complexity
deltaww CWE-284
7.5
7.5
2023-07-10 CVE-2023-34347 Deserialization of Untrusted Data vulnerability in Deltaww Infrasuite Device Master 00.00.01A/00.00.02A/1.0.5
?Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contains classes that cannot be deserialized, which could allow an attack to remotely execute arbitrary code.
network
low complexity
deltaww CWE-502
critical
 9.8
9.8
2023-03-27 CVE-2023-1133 Deserialization of Untrusted Data vulnerability in Deltaww Infrasuite Device Master 00.00.01A/00.00.02A
Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a vulnerability in which the Device-status service listens on port 10100/ UDP by default.
network
low complexity
deltaww CWE-502
critical
 9.8
9.8
2023-03-27 CVE-2023-1134 Path Traversal vulnerability in Deltaww Infrasuite Device Master 00.00.01A/00.00.02A
Delta Electronics InfraSuite Device Master versions prior to 1.0.5 are affected by a path traversal vulnerability, which could allow an attacker to read local files, disclose plaintext credentials, and escalate privileges.
network
low complexity
deltaww CWE-22
8.8
8.8
2023-03-27 CVE-2023-1135 Incorrect Permission Assignment for Critical Resource vulnerability in Deltaww Infrasuite Device Master 00.00.01A/00.00.02A
In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could set incorrect directory permissions, which could result in local privilege escalation.
local
low complexity
deltaww CWE-732
7.8
7.8