CVE-2023-1145

Publication date

2023-03-27 14:56:30

Family

icscert

State

PUBLISHED

Description

Delta Electronics InfraSuite Device Master versions prior to 1.0.5 are affected by a deserialization vulnerability targeting the Device-DataCollect service, which could allow deserialization of requests prior to authentication, resulting in remote code execution.