Skip to main content

Infrasuite Device Master CVE-2023-34316

HIGH
Files or Directories Accessible to External Parties (CWE-552)
2023-07-10 ics-cert@hq.dhs.gov
Path Traversal Information Disclosure Infrasuite Device Master
7.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Jul 10, 2023 - 20:15 nvd
HIGH 7.5

DescriptionNVD

​An attacker could bypass the latest Delta Electronics InfraSuite Device Master (versions prior to 1.0.7) patch, which could allow an attacker to retrieve file contents.

AnalysisAI

​An attacker could bypass the latest Delta Electronics InfraSuite Device Master (versions prior to 1.0.7) patch, which could allow an attacker to retrieve file contents. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-552. ​An attacker could bypass the latest Delta Electronics InfraSuite Device Master (versions prior to 1.0.7) patch, which could allow an attacker to retrieve file contents. Affected products include: Deltaww Infrasuite Device Master. Version information: prior to 1.0.7.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Infrasuite Device Master

View all
CVE-2023-1133 CRITICAL POC
9.8 Mar 27

Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a vulnerability in which the Device-status se
CVE-2023-47207 CRITICAL
9.8 Nov 30

In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an unauthenticated attacker to
CVE-2023-39226 CRITICAL
9.8 Nov 30

In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an unauthenticated attacker to
CVE-2023-30765 CRITICAL
9.8 Jul 10

​Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contain improper access controls that could allow an
CVE-2023-34347 CRITICAL
9.8 Jul 10

​Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contains classes that cannot be deserialized, which

CVE-2023-1142 CRITICAL
9.8 Mar 27

In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could use URL decoding to retrieve sy
CVE-2023-1140 CRITICAL
9.8 Mar 27

Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a vulnerability that could allow an attacker

CVE-2022-41779 CRITICAL
9.8 Oct 31

Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize network packets without proper verif
CVE-2022-41772 CRITICAL
9.8 Oct 31

Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior mishandle .ZIP archives containing characters us
CVE-2022-41657 CRITICAL
9.8 Oct 31

Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior allow attacker provided data already serialized

CVE-2022-40202 CRITICAL
9.8 Oct 31

The database backup function in Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior lacks proper aut
CVE-2022-38142 CRITICAL
9.8 Oct 31

Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through

Same weakness CWE-552 – Files or Directories Accessible to External Parties

View all
CVE-2016-3715 MEDIUM POC
5.5
CVE-2017-16651 HIGH POC
7.8
CVE-2023-6266 HIGH POC
7.5
CVE-2021-22015 HIGH POC
7.8
CVE-2017-14942 CRITICAL POC
9.8
CVE-2015-5211 CRITICAL POC
9.6
CVE-2020-37082 CRITICAL POC
9.8
CVE-2024-53676 CRITICAL POC
9.8

Same technique Path Traversal

View all
CVE-2025-64446 CRITICAL POC
9.8
CVE-2015-0016 HIGH POC
7.8
CVE-2016-0752 HIGH POC
7.5
CVE-2024-13159 CRITICAL POC
9.8
CVE-2024-13160 CRITICAL POC
9.8
CVE-2024-13161 CRITICAL POC
9.8
CVE-2014-0780 CRITICAL POC
9.8
CVE-2024-48248 HIGH POC
8.6

Share

CVE-2023-34316 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy