ZDI-23-677: Delta Electronics InfraSuite Device Master CtrlLayerNWCmd_ReportFileOperation Directory Traversal Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta Electronics InfraSuite Device Master. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-677?
ZDI-23-677 is considered a high severity vulnerability due to its potential to disclose sensitive information.
How do I fix ZDI-23-677?
To mitigate ZDI-23-677, ensure that you implement additional security measures to strengthen the authentication mechanism on Delta Electronics InfraSuite Device Master.
What type of attack is associated with ZDI-23-677?
ZDI-23-677 allows remote attackers to bypass the authentication mechanism and disclose sensitive information.
Is authentication required to exploit ZDI-23-677?
Yes, authentication is required to exploit ZDI-23-677, but it can be easily bypassed.
What software is affected by ZDI-23-677?
ZDI-23-677 affects Delta Electronics InfraSuite Device Master installations.