CVE-2023-1144 is an improper access control vulnerability affecting Delta Electronics InfraSuite Device Master versions prior to 1.0.5. An attacker can exploit this flaw by bypassing authorization in the Device-Gateway service, leading to privilege escalation. This vulnerability carries a high CVSS score of 8.8, indicating a critical risk. It can be exploited remotely with low complexity and requires only low privileges, potentially resulting in high impact to confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules or proof-of-concept code. The vulnerability has received minimal community discussion and media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 1.0.5CPE matchmatch criteria | cpe:2.3:a:deltaww:infrasuite_device_master:*:*:*:*:*:*:*:* | ||
>= 0, < 1.0.5CPE match | cpe:2.3:a:deltaww:infrasuite_device_master:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.