CVE-2023-1144: High severity delta electronics infrasuite device master vulnerability

Q: What is CVE-2023-1144?

CVE-2023-1144 is a vulnerability in Delta Electronics InfraSuite Device Master versions prior to 1.0.5 that allows an attacker to bypass authorization and potentially escalate privileges.

Q: How severe is CVE-2023-1144?

CVE-2023-1144 has a severity rating of 8.8, indicating a high severity level.

Q: How can an attacker exploit CVE-2023-1144?

An attacker can exploit CVE-2023-1144 by using the Device-Gateway service to bypass authorization.

Q: Is there a fix available for CVE-2023-1144?

Updating to version 1.0.5 of Delta Electronics InfraSuite Device Master fixes the CVE-2023-1144 vulnerability.

Published Mar 27, 2023

Updated

Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contains an improper access control vulnerability in which an attacker can use the Device-Gateway service and bypass authorization, which could result in privilege escalation.

Affected Software

2 affected components

Deltaww Infrasuite Device Master<1.0.5

Delta Electronics Versions prior to 1.0.5

Event History

Mar 27, 2023

CVE Published

via MITRE·02:43 PM

Data Sourced

via MITRE·02:43 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

ICSA-23-080-02

Frequently Asked Questions

What is CVE-2023-1144?

CVE-2023-1144 is a vulnerability in Delta Electronics InfraSuite Device Master versions prior to 1.0.5 that allows an attacker to bypass authorization and potentially escalate privileges.

How severe is CVE-2023-1144?

CVE-2023-1144 has a severity rating of 8.8, indicating a high severity level.

What software versions are affected by CVE-2023-1144?

Delta Electronics InfraSuite Device Master versions prior to 1.0.5 are affected by CVE-2023-1144.

How can an attacker exploit CVE-2023-1144?