CVE-2023-0444

A privilege escalation vulnerability exists in Delta Electronics InfraSuite Device Master 00.00.02a

High · published January 24, 2023

CVSS v3.1
8.8
EPSS
1%
Percentile
62.2
In the wild
Unconfirmed
What it is

A privilege escalation vulnerability exists in Delta Electronics InfraSuite Device Master 00.00.02a. A default user 'User', which is in the 'Read Only User' group, can view the password of another default user 'Administrator', which is in the 'Administrator' group. This allows any lower privileged user to log in as an administrator.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00992 · 62.2th percentile
Published
2023-01-24T00:00Z
EPSS history
Timeline
  • 24 JAN 00:00Z
    A privilege escalation vulnerability exists in Delta Electronics InfraSuite Device Master 00.00.02a
    cvelistv5