Delta Electronics InfraSuite Device Master Access Control Error Vulnerability (CNVD-2023-23889)

Delta Electronics InfraSuite Device Master is an appliance from Delta Electronics used to simplify and automate critical device monitoring. versions prior to Delta Electronics InfraSuite Device Master 1.0.5 are vulnerable to an access control error vulnerability, which can be exploited by an attacker to cause an elevation of privilege by using the Device-Gateway service and bypassing authorization.