Vulnerability · Published Jan 24, 2023 · Assigned by tenable
CVE-2023-0444
High 8.8
In plain English
A high-severity security flaw in Delta Electronics InfraSuite Device Master 00.00.02a. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 64% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)1.0%top 36.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A privilege escalation vulnerability exists in Delta Electronics InfraSuite Device Master 00.00.02a. A default user 'User', which is in the 'Read Only User' group, can view the password of another default user 'Administrator', which is in the 'Administrator' group. This allows any lower privileged user to log in as an administrator.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Delta Electronics InfraSuite Device Master 00.00.02a | Delta Electronics InfraSuite Device Master 00.00.02a |