CVE-2023-1135

In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could set incorrect directory permissions, which could result in local privilege escalation.

Score

CVSS 3.1 7.8 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2023-03-27

Last modified

2025-01-16

Weaknesses

CWE-732

Affected products

• Infrasuite Device Master (Delta Electronics)
• Infrasuite Device Master (Deltaww)

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-02