PT-2023-24808 · Delta Electronics · Infrasuite Device Master

Chudypb + 2 · Publicado 2023-07-10 · Atualizado 2023-07-17 · CVE-2023-34316

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Delta Electronics InfraSuite Device Master versions prior to 1.0.7

Description An attacker could bypass the latest patch, allowing them to retrieve file contents due to improper access control. This issue affects Delta Electronics InfraSuite Device Master, enabling information disclosure.

Recommendations For versions prior to 1.0.7, update to version 1.0.7 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation.

Correção

Improper Access Control

Files Accessible to External Parties

Enumeração de Fraquezas

CWE-284

CWE-552

Identificadores relacionados

CVE-2023-34316

ZDI-23-904

Produtos afetados

Infrasuite Device Master

Referências · 7

• https://t.me/cvenotify/54505 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-34316 · Aviso do Fabricante
• https://zerodayinitiative.com/advisories/ZDI-23-904 · Nota de Segurança
• https://cisa.gov/news-events/ics-advisories/icsa-23-180-01 · Correção
• https://t.me/cibsecurity/66309 · Publicação no Telegram
• https://t.me/cvenotify/54000 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-34316 · Nota de Segurança