Fiche vulnérabilité
CVE-2023-0444 : faille élevée Delta Electronics InfraSuite Device… (CVSS 8.8)
Description
A privilege escalation vulnerability exists in Delta Electronics InfraSuite Device Master 00.00.02a. A default user 'User', which is in the 'Read Only User' group, can view the password of another default user 'Administrator', which is in the 'Administrator' group. This allows any lower privileged user to log in as an administrator.
En bref
- Sévérité
- Élevée (CVSS 8.8)
- Vecteur CVSS
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Exploitation active
- Non signalée par la CISA
- Publication
- 24 janv. 2023
- Dernière mise à jour
- 3 avr. 2025
Produits concernés
- Delta Electronics InfraSuite Device Master 00.00.02a