Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contain improper access controls that could allow an attacker to alter privilege management configurations, resulting in privilege escalation.
https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-01