CVE-2023-1138
CVE-2023-1138
High · published March 27, 2023
What it is
Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain an improper access control vulnerability, which could allow an attacker to retrieve Gateway configuration files to obtain plaintext credentials.
The record
Technical detail
- CVSS v3.1
- 7.5 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00571 · 46.5th percentile
- Published
- 2023-03-27T14:41Z
EPSS history
Timeline
27 MAR 14:41Z
CVE-2023-1138
cvelistv5