References https://www.cisa.gov/news-events/ics-advisories/icsa-22-298-07 https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-02 https://nvd.nist.gov/vuln/detail/CVE-2022-38142 https://nvd.nist.gov/vuln/detail/cve-2023-1139 https://nvd.nist.gov/vuln/detail/cve-2023-1145 https://nvd.nist.gov/vuln/detail/CVE-2024-10456 https://www.zerodayinitiative.com/advisories/ZDI-24-1457/ https://www.nsfocus.net/vulndb/104439 https://www.sxxdckj.com/cms/a/Delta-Electronics-InfraSuite-Device-Master-fan-xu-lie-hua-lou-dong-CNVD-2023-23887.html https://www.6cloudtech.com/portal/article/index/id/1050.html https://access.redhat.com/security/cve/cve-2024-10456 https://www.rapid7.com/db/modules/exploit/windows/misc/delta_electronics_infrasuite_deserialization/ https://github.com/advisories/GHSA-c8p3-h9qp-45fm https://www.knowsafe.com/ti/info/0/990172
Related VulnerabilitiesPoCCVE-2024-5947: Deep Sea Electronics DSE855 - Authentication BypassDeep Sea Electronics DSE855 /Backup.bin 信息泄露漏洞 (CVE-2024-5947)Deep Sea Electronics DSE855 存在弱口令漏洞Deep Sea Electronics DSE855 存在认证绕过漏洞(CVE-2024–5947)Delta Industrial Automation DIAEnergie DIAE_tagHandler.ashx SQL 注入漏洞Delta Industrial Automation DIALink CVE-2021-38488跨站脚本漏洞Delta Electronics DIAEnergie CVE-2024-4547 SQL注入漏洞Delta Electronics DIAEnergie CVE-2024-4548 SQL Injection漏洞Delta Industrial Automation DIAEnergie CheckDIACloud SQL注入漏洞Delta Industrial Automation CNCSoft ScreenEditor DPB wTextLen栈缓冲区溢出漏洞Delta Electronics CNCSoft ScreenEditor 文件预览堆栈缓冲区溢出漏洞Delta Electronics InfraSuite Device Master CheckLoadingStartupConfig 目录遍历漏洞