ZDI-CAN-22013: ZDI-23-1756: Delta Electronics InfraSuite Device Master PlayWaveFile Directory Traversal Information Disclosure Vulnerability
Published Nov 30, 2023
·Updated
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta Electronics InfraSuite Device Master. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2023-47279.
Affected Software
1 affected component
Delta Electronics InfraSuite Device Master
Event History
Nov 30, 2023
Advisory Published
06:00 AM
Data Sourced
06:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-22013?
The CVSS rating of ZDI-CAN-22013 is 7.5, indicating a high severity level.
2
What type of vulnerability is ZDI-CAN-22013?
ZDI-CAN-22013 is a remote information disclosure vulnerability.
3
Who is affected by ZDI-CAN-22013?
ZDI-CAN-22013 affects installations of Delta Electronics InfraSuite Device Master.
4
Is authentication required to exploit ZDI-CAN-22013?
No, authentication is not required to exploit the ZDI-CAN-22013 vulnerability.
5
How can I mitigate ZDI-CAN-22013?
To mitigate ZDI-CAN-22013, ensure your Delta Electronics InfraSuite Device Master is updated to the latest versions that include security patches.