CVE-2023-1141: Command Injection

Q: What is CVE-2023-1141?

CVE-2023-1141 is a command injection vulnerability in Delta Electronics InfraSuite Device Master versions prior to 1.0.5 that could allow an attacker to inject arbitrary commands and achieve remote code execution.

Q: How severe is CVE-2023-1141?

CVE-2023-1141 has a severity rating of 8.8, which is considered high.

Q: How can an attacker exploit CVE-2023-1141?

An attacker can exploit CVE-2023-1141 by injecting arbitrary commands, which could lead to remote code execution.

Q: Is there a fix available for CVE-2023-1141?

Yes, the fix for CVE-2023-1141 is to update to Delta Electronics InfraSuite Device Master version 1.0.5 or newer.

Published Mar 27, 2023

Updated

Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a command injection vulnerability that could allow an attacker to inject arbitrary commands, which could result in remote code execution.

Affected Software

2 affected components

Deltaww Infrasuite Device Master<1.0.5

Delta Electronics Versions prior to 1.0.5

Event History

Mar 27, 2023

CVE Published

via MITRE·02:51 PM

Data Sourced

via MITRE·02:51 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

ICSA-23-080-02

Frequently Asked Questions

What is CVE-2023-1141?

CVE-2023-1141 is a command injection vulnerability in Delta Electronics InfraSuite Device Master versions prior to 1.0.5 that could allow an attacker to inject arbitrary commands and achieve remote code execution.

How severe is CVE-2023-1141?

CVE-2023-1141 has a severity rating of 8.8, which is considered high.

Which software versions are affected by CVE-2023-1141?

Delta Electronics InfraSuite Device Master versions prior to 1.0.5 are affected by CVE-2023-1141.

How can an attacker exploit CVE-2023-1141?