CVE-2023-1145 : What You Need to Know

This CVE record was published by ICS-CERT on March 27, 2023. The vulnerability affects Delta Electronics' InfraSuite Device Master versions prior to 1.0.5. The vulnerability was reported by Piotr Bazydlo (@chudypd) of Trend Micro and an Anonymous researcher working with Trend Micro’s Zero Day Initiative.

Understanding CVE-2023-1145

This section will delve into the details of CVE-2023-1145, including the vulnerability description, impact, affected systems, and mitigation strategies.

What is CVE-2023-1145?

Delta Electronics InfraSuite Device Master versions below 1.0.5 are susceptible to a deserialization flaw targeting the Device-DataCollect service. This vulnerability enables the deserialization of requests prior to authentication, potentially leading to remote code execution.

The Impact of CVE-2023-1145

The CVSS v3.1 base score for this vulnerability is 7.8, categorizing it as high severity. The attack vector is local, with low attack complexity but high impacts on confidentiality, integrity, and availability. The exploitation of this vulnerability could lead to unauthorized remote code execution.

Technical Details of CVE-2023-1145

In this section, we will explore the technical aspects of CVE-2023-1145, including the vulnerability description, affected systems and versions, and the exploitation mechanism.

Vulnerability Description

The deserialization vulnerability in Delta Electronics InfraSuite Device Master versions prior to 1.0.5 allows for the execution of remote code by deserializing requests before authentication, posing a significant security risk.

Affected Systems and Versions

The vulnerability impacts InfraSuite Device Master versions less than 1.0.5, specifically targeting the Device-DataCollect service within these versions.

Exploitation Mechanism

By exploiting this deserialization vulnerability, threat actors can potentially execute arbitrary remote code on affected systems, leading to unauthorized access and control.

Mitigation and Prevention

Mitigating CVE-2023-1145 is crucial to maintaining the security of Delta Electronics InfraSuite Device Master installations. Implementing immediate and long-term security measures is essential.

Immediate Steps to Take

Users are advised to promptly uninstall any earlier versions of InfraSuite Device Master and reinstall the updated version 1.0.5 provided by Delta Electronics. This will help eliminate the vulnerability and enhance system security.

Long-Term Security Practices

In addition to updating to the patched version, organizations should implement rigorous security practices such as regular vulnerability assessments, network segmentation, least privilege access controls, and monitoring for suspicious activities.

Patching and Updates

Delta Electronics recommends users to uninstall older versions of InfraSuite Device Master and reinstall the updated version 1.0.5 by using the provided installer. Regularly applying security patches and updates is crucial in safeguarding against potential vulnerabilities.