First published: Thu Nov 30 2023(Updated: )
In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an unauthenticated attacker to execute arbitrary code through a single UDP packet.
Credit: ics-cert@hq.dhs.gov
Affected Software | Affected Version | How to fix |
---|---|---|
Deltaww Infrasuite Device Master | =1.0.7 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID is CVE-2023-39226.
The severity of CVE-2023-39226 is critical with a CVSS score of 9.8.
CVE-2023-39226 allows an unauthenticated attacker to execute arbitrary code through a single UDP packet in Delta Electronics InfraSuite Device Master v.1.0.7.
To fix CVE-2023-39226, update Delta Electronics InfraSuite Device Master to a version that addresses the vulnerability.
You can find more information about CVE-2023-39226 at https://www.cisa.gov/news-events/ics-advisories/icsa-23-331-01.