Lucene search
HistoryNov 30, 2023 - 11:15 p.m.
CVE-2023-47279
delta electronics
infrasuite
unauthorized access
user information
plaintext credentials
ntlm relaying
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
43.6%
In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an unauthenticated attacker to disclose user information through a single UDP packet, obtain plaintext credentials, or perform NTLM relaying.
Affected configurations
Node
deltawwinfrasuite_device_masterMatch1.0.7
| Vendor | Product | Version | CPE |
|---|---|---|---|
| deltaww | infrasuite_device_master | 1.0.7 | cpe:2.3:a:deltaww:infrasuite_device_master:1.0.7:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2023-47279
2023-11-30 23:15:07
zdi
zdi
prion
prion
Design/Logic Flaw
2023-11-30 23:15:00
cvelist
cvelist
CVE-2023-47279 Delta Electronics InfraSuite Device Master Path Traversal
2023-11-30 22:12:05
ics
ics
Delta Electronics InfraSuite Device Master
2023-11-28 12:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
43.6%
Related for NVD:CVE-2023-47279