CVE-2023-0444
Last modified
CVE-2023-0444 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. A privilege escalation vulnerability exists in Delta Electronics InfraSuite Device Master 00.00.02a. A default user 'User', which is in the 'Read Only User' group, can view the password of another default user 'Administrator', which is in the 'Administrator' group. EPSS estimates a 0.99% chance of exploitation in the next 30 days.
Description
A privilege escalation vulnerability exists in Delta Electronics InfraSuite Device Master 00.00.02a. A default user 'User', which is in the 'Read Only User' group, can view the password of another default user 'Administrator', which is in the 'Administrator' group. This allows any lower privileged user to log in as an administrator.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Deltaww | Infrasuite Device Master | 00.00.02a |
References
- https://www.tenable.com/security/research/tra-2023-4Third Party Advisory
- https://www.tenable.com/security/research/tra-2023-4Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-0444?
How severe is CVE-2023-0444?
How do I fix CVE-2023-0444?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-0438Cross-Site Request Forgery (CSRF) in GitHub repository modob…6.5
- CVE-2023-0439The NEX-Forms WordPress plugin before 8.4.4 does not escape …5.4
- CVE-2023-0440Observable Discrepancy in GitHub repository healthchecks/hea…5.3
- CVE-2023-0441The Gallery Blocks with Lightbox WordPress plugin before 3.0…8.1
- CVE-2023-0442The Loan Comparison WordPress plugin before 1.5.3 does not v…6.1
- CVE-2023-0443The AnyWhere Elementor WordPress plugin before 1.2.8 disclos…5.3
- CVE-2023-0446The My YouTube Channel plugin for WordPress is vulnerable to…5.5
- CVE-2023-0447The My YouTube Channel plugin for WordPress is vulnerable to…4.3
- CVE-2023-0448The WP Helper Lite WordPress plugin, in versions < 4.3, retu…6.1
- CVE-2023-0449Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2023-0450An issue has been discovered in GitLab affecting all version…4.6
- CVE-2023-0451Econolite EOS versions prior to 3.2.23 lack a password requi…7.5
Are you affected by CVE-2023-0444?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
