Vulnerability · Published Jul 10, 2023 · Assigned by icscert
CVE-2023-30765Delta Electronics InfraSuite Device Master Improper Access Control
High 8.8
In plain English
A high-severity privilege mismanagement in Infrasuite Device Master from Delta Electronics. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.0% (higher than 81% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)2.0%top 19.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC
Official description
Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contain improper access controls that could allow an attacker to alter privilege management configurations, resulting in privilege escalation.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Delta Electronics | Infrasuite Device Master | 0 – before v1.0.7 |
Weakness: CWE-269 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H