ZDI-CAN-19280: ZDI-23-678: Delta Electronics InfraSuite Device Master CtrlLayerNWCmd_ReportFileOperation Directory Traversal Denial-of-Service Vulnerability
This vulnerability allows remote attackers to delete arbitrary files on affected installations of Delta Electronics InfraSuite Device Master. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-19280?
The severity of ZDI-CAN-19280 is high due to its potential for remote attackers to delete arbitrary files.
How do I fix ZDI-CAN-19280?
To mitigate ZDI-CAN-19280, apply the latest security updates from Delta Electronics for the InfraSuite Device Master software.
Who is affected by ZDI-CAN-19280?
ZDI-CAN-19280 affects installations of Delta Electronics InfraSuite Device Master that are vulnerable to authentication bypass.
Can authentication be bypassed in ZDI-CAN-19280?
Yes, ZDI-CAN-19280 involves an authentication mechanism that can be bypassed, allowing attacks even with required authentication.
What types of attacks are possible with ZDI-CAN-19280?
ZDI-CAN-19280 enables remote attackers to delete arbitrary files, potentially leading to data loss and system compromise.