ID
Product
Infrasuite Device Master
32
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 14High 18Medium 0Low 0
Watch
Add Infrasuite Device Master to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-46690 | 8.8 | Nov 30 | In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an attacker to write to any file to any location of the filesystem, which could lead to… Affected: 1.0.7 |
| CVE-2023-1144 | 8.8 | Mar 27 | Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contains an improper access control vulnerability in which an attacker can use the Device-Gateway service and… Affected: before 1.0.5 |
| CVE-2023-1143 | 8.8 | Mar 27 | In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could use Lua scripts, which could allow an attacker to remotely execute arbitrary code Affected: before 1.0.5 |
| CVE-2023-1141 | 8.8 | Mar 27 | Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a command injection vulnerability that could allow an attacker to inject arbitrary commands, which could… Affected: before 1.0.5 |
| CVE-2023-1139 | 8.8 | Mar 27 | Delta Electronics InfraSuite Device Master versions prior to 1.0.5 are affected by a deserialization vulnerability targeting the Device-gateway service, which could allow… Affected: before 1.0.5 |
| CVE-2023-1137 | 8.8 | Mar 27 | Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a vulnerability in which a low-level user could extract files and plaintext credentials of administrator… Affected: before 1.0.5 |
| CVE-2023-1134 | 8.8 | Mar 27 | Delta Electronics InfraSuite Device Master versions prior to 1.0.5 are affected by a path traversal vulnerability, which could allow an attacker to read local files, disclose… Affected: before 1.0.5 |
| CVE-2023-0444 | 8.8 | Jan 26 | A privilege escalation vulnerability exists in Delta Electronics InfraSuite Device Master 00.00.02a Affected: 00.00.02a |
| CVE-2022-41778 | 8.8 | Jan 13 | Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-DataCollect service port without proper… Affected: through 00.00.01a |
| CVE-2022-41644 | 8.8 | Oct 31 | Delta Electronics InfraSuite Device Master versions 00.00.01a and prior lacks authentication for a function that changes group privileges Affected: before 00.00.02a |
| CVE-2023-1145 | 7.8 | Mar 27 | Delta Electronics InfraSuite Device Master versions prior to 1.0.5 are affected by a deserialization vulnerability targeting the Device-DataCollect service, which could allow… Affected: before 1.0.5 |
| CVE-2023-1135 | 7.8 | Mar 27 | In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could set incorrect directory permissions, which could result in local privilege escalation Affected: before 1.0.5 |
| CVE-2023-47279 | 7.5 | Nov 30 | In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an unauthenticated attacker to disclose user information through a single UDP packet,… Affected: 1.0.7 |
| CVE-2023-34316 | 7.5 | Jul 10 | An attacker could bypass the latest Delta Electronics InfraSuite Device Master (versions prior to 1.0.7) patch, which could allow an attacker to retrieve file contents Affected: before 1.0.7 |
| CVE-2023-1138 | 7.5 | Mar 27 | Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain an improper access control vulnerability, which could allow an attacker to retrieve Gateway… Affected: before 1.0.5 |
| CVE-2023-1136 | 7.5 | Mar 27 | In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an unauthenticated attacker could generate a valid token, which would lead to authentication bypass Affected: before 1.0.5 |
| CVE-2022-41776 | 7.5 | Oct 31 | Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to trigger the WriteConfiguration method, which could allow an attacker to… Affected: before 00.00.02a |
| CVE-2022-41688 | 7.5 | Oct 31 | Delta Electronics InfraSuite Device Master versions 00.00.01a and prior lack proper authentication for functions that create and modify user groups Affected: before 00.00.02a |
Showing 18