CVE-2023-1133

Related Files

Delta Electronics InfraSuite Device Master Deserialization

Posted Jun 8, 2023

Authored by anonymous, Shelby Pace | Site metasploit.com

Delta Electronics InfraSuite Device Master versions below 1.0.5 have an unauthenticated .NET deserialization vulnerability within the ParseUDPPacket() method of the Device-Gateway-Status process. The ParseUDPPacket() method reads user-controlled packet data and eventually calls BinaryFormatter.Deserialize() on what it determines to be the packet header without appropriate validation, leading to unauthenticated code execution as the user running the Device-Gateway-Status process.

tags | exploit, code execution

advisories | CVE-2023-1133

SHA-256 | 9f0d3862f019202aea4e14692644ab8356967d12a61b6b3dc1c1b6df8ea0f48c

Download | Favorite | View