CVE-2023-34347 — Delta Electronics InfraSuite Device Master Deserialization of Untrusted Data

CVE-2023-34347

Delta Electronics InfraSuite Device Master Deserialization of Untrusted Data PUBLISHED

Description (CNA)

Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contains classes that cannot be deserialized, which could allow an attack to remotely execute arbitrary code.

Affected (CNA)

Vendor / product	Versions
Delta Electronics / Infrasuite Device Master	affected 0 before v1.0.7

CWE

CWE-502

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-01

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-01

CISA-ADP

No English description supplied.

No references supplied.