CVE-2023-34316

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An attacker could bypass the latest Delta Electronics InfraSuite Device Master (versions prior to 1.0.7) patch, which could allow an attacker to retrieve file contents.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-552

Affected software

Vendor	Product	Versions
Delta Electronics	Infrasuite Device Master	< v1.0.7

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-01Mitigation, Patch, Third Party Advisory, US Government Resource
https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-01Mitigation, Patch, Third Party Advisory, US Government Resource

Timeline

Published: Jul 10, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-343176.5An improper input validation vulnerability exists in the OAS Engine User Creation functionality of Open Automation Software OAS Platform v18 CVE-2023-343187.8A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41. This flaw can lead to a denial of CVE-2023-343197.8The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the head CVE-2023-343210.0Server-Side Request Forgery (SSRF) in GitHub repository plantuml/plantuml prior to 1.2023.9.CVE-2023-343205.5Cortex-A77 cores (r0p0 and r1p0) are affected by erratum 1508412 where software, under certain circumstances, could deadlock a core due to t CVE-2023-343213.3Arm provides multiple helpers to clean & invalidate the cache for a given region. This is, for instance, used when allocating guest memory CVE-2023-343227.8For migration as well as to work around kernels unaware of L1TF (see XSA-273), PV guests may be run in shadow paging mode. Since Xen itself CVE-2023-343235.5When a transaction is committed, C Xenstored will first check the quota is correct before attempting to commit any nodes. It would be possi CVE-2023-343244.9Closing of an event channel in the Linux kernel can result in a deadlock. This happens when the close is being performed in parallel to an u CVE-2023-343257.8[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] libfsimage CVE-2023-343267.8The caching invalidation guidelines from the AMD-Vi specification (48882—Rev 3.07-PUB—Oct 2022) is incorrect on some hardware, as devices wi CVE-2023-343275.5[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] AMD CPUs s