CVE-2023-1137
CVE-2023-1137
Medium · published March 27, 2023
What it is
Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a vulnerability in which a low-level user could extract files and plaintext credentials of administrator users, resulting in privilege escalation.
The record
Technical detail
- CVSS v3.1
- 6.5 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00550 · 45.3th percentile
- Published
- 2023-03-27T14:44Z
EPSS history
Timeline
27 MAR 14:44Z
CVE-2023-1137
cvelistv5