Improper Access Control Vulnerability in Delta Electronics InfraSuite Device Master

CVE-2023-1138 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain an improper access control vulnerability, which could allow an attacker to retrieve Gateway configuration files to obtain plaintext credentials.

Learn more about our Web Application Penetration Testing UK.