CVE-2023-34316: Delta Electronics InfraSuite Device Master Improper Access Control
First published: Mon Jul 10 2023(Updated: )
?An attacker could bypass the latest Delta Electronics InfraSuite Device Master (versions prior to 1.0.7) patch, which could allow an attacker to retrieve file contents.
Credit: ics-cert@hq.dhs.gov ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Deltaww Infrasuite Device Master | <1.0.7 | |
| Delta Electronics InfraSuite Device Master | <1.0.7 | 1.0.7 |
Remedy
Delta Electronics has provided a fix to these vulnerabilities. Users are encouraged to update to the latest version. * Delta Electronics InfraSuite Device Master: Update to v1.0.7 https://datacenter-softwarecenter.deltaww.com/Download/UPS/Software/InfraSuite_Device_Master_1.0.7(x64).exe .
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Delta Electronics InfraSuite Device Master vulnerability?
The vulnerability ID for this Delta Electronics InfraSuite Device Master vulnerability is CVE-2023-34316
What is the severity of CVE-2023-34316?
The severity of CVE-2023-34316 is high with a severity value of 7.
How can an attacker exploit CVE-2023-34316?
An attacker can exploit CVE-2023-34316 by bypassing the latest Delta Electronics InfraSuite Device Master patch and retrieving file contents.
Which versions of Delta Electronics InfraSuite Device Master are affected by CVE-2023-34316?
Versions prior to 1.0.7 of Delta Electronics InfraSuite Device Master are affected by CVE-2023-34316.
Is there a patch available for CVE-2023-34316?
Yes, there is a patch available to address CVE-2023-34316. It is recommended to update to version 1.0.7 of Delta Electronics InfraSuite Device Master.
- collector/nvd-latest
- collector/nvd-index
- agent/author
- agent/type
- agent/references
- agent/weakness
- collector/nvd-api
- agent/software-canonical-lookup-request
- collector/ics-cert-advisory
- source/ICS
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/remedy
- agent/title
- agent/last-modified-date
- agent/first-publish-date
- agent/description
- agent/tags
- agent/event
- vendor/deltaww
- canonical/deltaww infrasuite device master
- vendor/delta electronics
- canonical/delta electronics infrasuite device master