CVE-2023-46690

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Nov 30, 2023
Updated: Dec 6, 2023
CWE ID 22
CWE ID 35

Summary

CVE-2023-46690 is a newly discovered vulnerability affecting Delta Electronics InfraSuite Device Master version 1.0.7. This issue grants attackers the ability to write to any file and modify it to any location on the filesystem. Successful exploitation of this vulnerability could potentially result in remote code execution, posing a significant risk to affected systems. Delta Electronics is urged to address this issue promptly by updating to a patched version to prevent potential attacks. Unpatched systems remain vulnerable to remote code execution attempts.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • InfraSuite Device Master

Affected Vendors

  • Deltaww