CVE-2023-30765
HIGHInfraSuite Device Master < 1.0.7 - Privilege Escalation via Improper Access Controls
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2023-30765. PoCs published by 0xfml.
AI-analyzed exploit summary This is a functional privilege escalation exploit for Delta Electronics Infrasuite Device Master. It leverages an authentication bypass to escalate a user to the Administrator group by manipulating user group assignments via crafted HTTP requests.
Description
Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contain improper access controls that could allow an attacker to alter privilege management configurations, resulting in privilege escalation.
Exploits (1)
This is a functional privilege escalation exploit for Delta Electronics Infrasuite Device Master. It leverages an authentication bypass to escalate a user to the Administrator group by manipulating user group assignments via crafted HTTP requests.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H