Delta Electronics: InfraSuite Device Master

InfraSuite Device Master is a data center management solution that is free of charge. Software Product enables operators and data center managers to monitor critical data center equipment in real time, such as uninterruptible power supplies (UPSs), cooling systems, and monitoring and control.

Opportunities

The solution sends alerts about the status of devices, provides access to the event log and retrospective data throughout the facility infrastructure, all in a convenient format on the monitoring screen. This functionality can be used to manage infrastructure both at one site and at several spaced points located in different cities or even countries, the company says.

InfraSuite Device Master uses the role-based principle of assigning permissions to users. The application sends automatic personalized alerts to, as well e-mail as text and audio messages.

Features

• Simple deployment
• Real-time monitoring
• broad protocol support, including Modbus, SNMP, and OPC;
• Automatic e-mail, SMS, or audio alerts
• Comprehensive user access control by group and privilege
• Event management, including defined event levels and advanced query capabilities
• a complete event log for subsequent evaluation and analysis.

Availability

InfraSuite Device Master can be downloaded from the Delta Electronics website. The product can be used for free on no more than five devices.

2023: Critical hole warning from US government

On March 21, 2023, the United States Cybersecurity and Infrastructure Protection Agency (CISA) released eight bulletins describing issues identified in the Automated Control Systems (ICS) of various vendors.

In particular, critical vulnerabilities were found in Delta Electronics and Rockwell Automation equipment. So, 13 holes were immediately identified in the Delta Electronics InfraSuite Device Master product - specialized software for monitoring devices in real time. Problems affect all versions of the platform - up to 1.0.5.

In the Delta Electronics InfraSuite Device Master product, 13 holes were identified at once

Successful exploitation of these vulnerabilities could allow an unauthenticated attacker to gain access to files and credentials, elevate privileges, and remotely execute arbitrary code, the CISA notice says.

The greatest danger is a flaw with the designation CVE-2023-1133 (CVSS estimate - 9.8): this is a critical drawback arising from the fact that InfraSuite Device Master accepts unverified UDP packets and deserializes the content, thereby allowing a remote attacker who has not been identified to run malicious code.

Another set of vulnerabilities applies to ThinManager ThinServer developed by Rockwell Automation and affects a variety of versions of software for managing thin client and remote desktop protocol (RDP). The most serious problems are two bypass holes: CVE-2023-28755 (CVSS score - 9.8) and CVE-2023-28756 (CVSS score - 7.5). They give a remote attacker the ability to download arbitrary files to the directory where the ThinServer.exe module is located without authentication. Moreover, a cybercriminal can exploit the CVE-2023-28755 flaw to overwrite existing executable files with Trojan versions, which will lead to remote execution of malicious code.^[1]

2017: Issue

On November 7, 2017, Delta Electronics introduced InfraSuite Device Master, a data center and its infrastructure management solution that allows operators to switch from simple device monitoring to comprehensive data center infrastructure management at any time as needed.

InfraSuite Device Master comes with Delta uninterruptible power systems and is suitable for both small data centers and centralized management and monitoring systems.

InfraSuite Device Master is easily deployed and, in addition to real-time monitoring, also provides event history across all monitored devices on site.

In addition, if an organization decides to implement comprehensive data center infrastructure management in the future, it can easily switch from InfraSuite Device Master to the full-featured Delta InfraSuite Manager DCIM solution.

Notes