{"dataType": "CVE_RECORD", "dataVersion": "5.0", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2023-0444", "assignerOrgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be", "assignerShortName": "tenable", "dateUpdated": "2023-01-24T00:00:00", "dateReserved": "2023-01-23T00:00:00", "datePublished": "2023-01-24T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be", "shortName": "tenable", "dateUpdated": "2023-01-24T00:00:00"}, "descriptions": [{"lang": "en", "value": "A privilege escalation vulnerability exists in Delta Electronics InfraSuite Device Master 00.00.02a. A default user 'User', which is in the 'Read Only User' group, can view the password of another default user 'Administrator', which is in the 'Administrator' group. This allows any lower privileged user to log in as an administrator."}], "affected": [{"vendor": "n/a", "product": "Delta Electronics InfraSuite Device Master 00.00.02a", "versions": [{"version": "Delta Electronics InfraSuite Device Master 00.00.02a", "status": "affected"}]}], "references": [{"url": "https://www.tenable.com/security/research/tra-2023-4"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "Privilege Escalation"}]}]}}}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:deltaww:infrasuite_device_master:00.00.02a:*:*:*:*:*:*:*", "matchCriteriaId": "695A42D4-2C18-40C9-9C5C-EFD8AE91A344", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A privilege escalation vulnerability exists in Delta Electronics InfraSuite Device Master 00.00.02a. A default user 'User', which is in the 'Read Only User' group, can view the password of another default user 'Administrator', which is in the 'Administrator' group. This allows any lower privileged user to log in as an administrator."}, {"lang": "es", "value": "Existe una vulnerabilidad de escalada de privilegios en Delta Electronics InfraSuite Device Master 00.00.02a. Un usuario predeterminado 'Usuario', que est\u00e1 en el grupo 'Usuario de solo lectura', puede ver la contrase\u00f1a de otro usuario predeterminado 'Administrador', que est\u00e1 en el grupo 'Administrador'. Esto permite que cualquier usuario con privilegios inferiores inicie sesi\u00f3n como administrador."}], "id": "CVE-2023-0444", "lastModified": "2023-02-06T14:50:05.023", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-01-26T21:18:08.363", "references": [{"source": "vulnreport@tenable.com", "tags": ["Third Party Advisory"], "url": "https://www.tenable.com/security/research/tra-2023-4"}], "sourceIdentifier": "vulnreport@tenable.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}