ICS Advisory: Delta Electronics InfraSuite Device Master

Here is a summary of the provided document:

Summary:

The Delta Electronics InfraSuite Device Master has a deserialization of untrusted data vulnerability (CVE-2023-46604) with a CVSS v4 score of 9.3. This vulnerability can lead to remote code execution and can be exploited remotely with low attack complexity. The affected products are InfraSuite Device Master versions 1.0.10 and prior. Delta Electronics has released a patched version (1.0.11) to fix this issue. CISA recommends taking defensive measures, such as minimizing network exposure, isolating control systems, and using secure remote access methods. No known public exploitation has been reported at this time.