PT-2023-2320 · Delta Electronics · Infrasuite Device Master

Chudypd + 1 · Publicado 2023-03-21 · Atualizado 2023-05-17 · CVE-2023-1143

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Delta Electronics InfraSuite Device Master versions prior to 1.0.5

Description The issue is related to errors in code generation, allowing an attacker to remotely execute arbitrary code by running Lua scripts. This could enable an attacker to perform unauthorized actions on the affected system.

Recommendations For Delta Electronics InfraSuite Device Master versions prior to 1.0.5, update to version 1.0.5 or later to resolve the issue. As a temporary workaround, consider restricting the use of Lua scripts until a patch is applied.

Correção

Enumeração de Fraquezas

CWE-749

Identificadores relacionados

BDU:2023-02085

CVE-2023-1143

ZDI-23-676

Produtos afetados

Infrasuite Device Master

Referências · 6

• https://cisa.gov/news-events/ics-advisories/icsa-23-080-02 · Nota
• https://bdu.fstec.ru/vul/2023-02085 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-23-676 · Nota de Segurança
• https://t.me/cibsecurity/60778 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-1143 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-1143 · Aviso do Fabricante