Lucene search

K
zdiPiotr Bazydlo (@chudypb) of Trend Micro Zero Day InitiativeZDI-23-686
HistoryMay 17, 2023 - 12:00 a.m.

Delta Electronics InfraSuite Device Master Incorrect Permission Assignment Local Privilege Escalation Vulnerability

2023-05-1700:00:00
Piotr Bazydlo (@chudypb) of Trend Micro Zero Day Initiative
www.zerodayinitiative.com
11
delta electronics
infrasuite
device master
vulnerability
local privilege escalation
incorrect folder permissions
arbitrary code execution
system context

0.001 Low

EPSS

Percentile

20.1%

This vulnerability allows local attackers to escalate privileges on affected installations of Delta Electronics InfraSuite Device Master. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the product installer. The product sets incorrect permissions on folders. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.

0.001 Low

EPSS

Percentile

20.1%

Related for ZDI-23-686