CVE-2023-1142
CVE-2023-1142
High · published March 27, 2023
What it is
In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could use URL decoding to retrieve system files, credentials, and bypass authentication resulting in privilege escalation.
The record
Technical detail
- CVSS v3.1
- 7.5 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.01090 · 65.1th percentile
- Published
- 2023-03-27T14:48Z
EPSS history
Timeline
27 MAR 14:48Z
CVE-2023-1142
cvelistv5