PT-2023-2324 · Delta Electronics · Infrasuite Device Master

Chudypd + 1 · Publicado 2023-03-21 · Atualizado 2023-05-17 · CVE-2023-1135

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Delta Electronics InfraSuite Device Master versions prior to 1.0.5

Description The issue is related to the installation of incorrect directory permissions, which could allow an attacker to escalate their privileges locally.

Recommendations For versions prior to 1.0.5, update to version 1.0.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the directory with incorrect permissions to minimize the risk of exploitation.

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

BDU:2023-02089

CVE-2023-1135

ZDI-23-686

Produtos afetados

Infrasuite Device Master

Referências · 6

• https://cisa.gov/news-events/ics-advisories/icsa-23-080-02 · Nota
• https://t.me/cibsecurity/60789 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2023-02089 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-1135 · Aviso do Fabricante
• https://zerodayinitiative.com/advisories/ZDI-23-686 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2023-1135 · Nota de Segurança