ZDI-23-678: Delta Electronics InfraSuite Device Master CtrlLayerNWCmd_ReportFileOperation Directory Traversal Denial-of-Service Vulnerability
This vulnerability allows remote attackers to delete arbitrary files on affected installations of Delta Electronics InfraSuite Device Master. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-678?
The severity of ZDI-23-678 is critical due to the potential for remote file deletion.
How do I fix ZDI-23-678?
To fix ZDI-23-678, apply the latest security patch provided by Delta Electronics for the InfraSuite Device Master.
What systems are affected by ZDI-23-678?
ZDI-23-678 affects installations of Delta Electronics InfraSuite Device Master.
Can ZDI-23-678 be exploited without authentication?
No, although authentication is required, the vulnerability allows for the bypass of the existing authentication mechanism.
What is the impact of exploiting ZDI-23-678?
Exploiting ZDI-23-678 allows remote attackers to delete arbitrary files, potentially leading to system compromise.