ZDI-23-904: Delta Electronics InfraSuite Device Master APRunning Improper Access Control Information Disclosure Vulnerability
Published Jul 10, 2023
·Updated
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta Electronics InfraSuite Device Master. Authentication is required to exploit this vulnerability.
Affected Software
1 affected component
Delta Electronics InfraSuite Device Master
Event History
Jul 10, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-23-904?
The severity of ZDI-23-904 is classified as a medium risk due to its potential for sensitive information disclosure.
2
What effect does ZDI-23-904 have on Delta Electronics InfraSuite Device Master?
ZDI-23-904 allows remote attackers to disclose sensitive information if they have valid authentication.
3
How do I fix ZDI-23-904?
To fix ZDI-23-904, ensure that your Delta Electronics InfraSuite Device Master is updated to the latest security patch provided by the vendor.
4
Who is affected by ZDI-23-904?
Users of Delta Electronics InfraSuite Device Master are affected by ZDI-23-904.
5
Is authentication required to exploit ZDI-23-904?
Yes, authentication is required to exploit the vulnerability identified as ZDI-23-904.