Privilege Escalation Vulnerability in Delta Electronics Infrasuite Device Master

Delta Electronics Infrasuite Device Master versions prior to 1.0.7 are susceptible to a privilege escalation vulnerability tracked as CVE-2023-30765 (ZDI-23-905). This vulnerability allows an authenticated attacker to perform an unauthorized modification of user group memberships, specifically enabling the escalation of a standard user account to the administrator group. The discovery of this flaw, attributed to Piotr Bazydlo, highlights a critical security gap in access control management within the Infrasuite Device Master platform. The availability of a public functional exploit script on repository platforms as of August 2026 significantly increases the likelihood of exploitation attempts against unpatched infrastructure. Security teams should prioritize patching instances to version 1.0.7 or higher to mitigate unauthorized administrative access.

Impact

Successful exploitation of CVE-2023-30765 allows an attacker to gain full administrative control over the targeted Delta Electronics Infrasuite Device Master instance. This leads to complete system compromise, unauthorized access to sensitive operational data, and potential manipulation of integrated facility management hardware. Given the product's role in infrastructure management, impact includes potential disruption to critical facility services.

Recommendation

Prioritize the upgrade of all internet-facing Delta Electronics Infrasuite Device Master instances to version 1.0.7 or later. Restrict network access to the web management interface, ensuring it is not exposed to the public internet. Audit existing administrator groups for unauthorized users added through non-standard account creation processes. Monitor web server logs for suspicious POST requests targeting user management endpoints consistent with the documented exploit tool usage.