CVE-2023-0432
Vulnerability Description
The web configuration service of the affected device contains an authenticated command injection vulnerability. It can be used to execute system commands on the operating system (OS) from the device in the context of the user "root." If the attacker has credentials for the web service, then the device could be fully compromised.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-0432
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- T. Weber of CyberDanube Security Research reported it to Delta Electronics.
More from Delta Electronics
View All →Affected Vendor
Delta Electronics
View all reports →