Vulnerability in Deltaww Infrasuite Device Master

CVE-2023-0444

A privilege escalation vulnerability exists in Delta Electronics InfraSuite Device Master 00.00.02a. A default user 'User', which is in the 'Read Only User' group, can view the password of another default user 'Administrator', which is in the 'Administrator' group. This allows any lower privileged user to log in as an administrator.

Published · last modified .

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.010 (61.1th percentile), scored .

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 61st percentile — 61.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS trend (30 days)EPSS over the last 30 days for CVE-2023-0444: held from 0.010 to 0.010.

EPSS over last 30 days · oldest: 0.010 · newest: 0.010 · change: 0.000

Affected products

  • Deltaww Infrasuite Device Master — versions 00.00.02a
  • Delta Electronics Infrasuite Device Master 00.00.02a — versions Delta Electronics InfraSuite Device Master 00.00.02a

References

Frequently asked questions

What is CVE-2023-0444?
CVE-2023-0444 is a high-severity vulnerability in Deltaww Infrasuite Device Master. CVSS score: 8.8/10. Published 2023-01-26.
How severe is CVE-2023-0444?
High severity. CVSS v3 base score is 8.8 out of 10.