PT-2023-2085 · Delta Electronics · Infrasuite Device Master

Chudypd + 1 · Published 2023-03-21 · Updated 2023-06-08 · CVE-2023-1133

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Delta Electronics InfraSuite Device Master versions prior to 1.0.5

Description The issue is related to the Device-status service listening on port 10100/UDP by default, accepting unverified UDP packets, and deserializing their content. This could allow an unauthenticated attacker to remotely execute arbitrary code. The vulnerability is associated with the deserialization of untrusted data, which may enable a remote attacker to execute arbitrary code using specially crafted UDP packets.

Recommendations For versions prior to 1.0.5, update to version 1.0.5 or later to resolve the issue. As a temporary workaround, consider restricting access to port 10100/UDP to minimize the risk of exploitation. Additionally, disabling the Device-status service until a patch is applied may also help mitigate the risk.

Exploit

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

BDU:2023-01818

CVE-2023-1133

ZDI-23-672

ZDI-23-683

Affected Products

Infrasuite Device Master

References · 12

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/delta_electronics_infrasuite_deserialization.rb · Exploit
• https://osv.dev/vulnerability/CVE-2023-1133 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-1133 · Security Note
• https://bdu.fstec.ru/vul/2023-01818 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-23-683 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-23-672 · Security Note
• https://t.me/cvenotify/46940 · Telegram Post
• https://t.me/true_secator/4205 · Telegram Post
• https://t.me/cibsecurity/60787 · Telegram Post
• http://packetstormsecurity.com/files/172799/Delta-Electronics-InfraSuite-Device-Master-Deserialization.html · Note
• https://cisa.gov/news-events/ics-advisories/icsa-23-080-02 · Note
• https://t.me/cvenotify/46941 · Telegram Post