CVE Catalog
CVE-2023-34347
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk0.83%
53th percentile - higher than 53% of all known CVEs
Summary
Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contain classes that cannot be deserialized, which could allow an attacker to remotely execute arbitrary code.
Risk Assessment
This vulnerability poses a significant risk to organizations as it allows for remote control of the system.
Recommendation
It is recommended to upgrade to version 1.0.7 or later to mitigate this vulnerability.
Original NVD description (English source)
Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contains classes that cannot be deserialized, which could allow an attack to remotely execute arbitrary code.