Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2023-1142PUBLISHED: 2023-03-27In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could use URL decoding to retrieve system files, credentials, and bypass authentication resulting in privilege escalation.
CVE-2023-1143PUBLISHED: 2023-03-27In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could use Lua scripts, which could allow an attacker to remotely execute arbitrary code.
CVE-2023-1144PUBLISHED: 2023-03-27Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contains an improper access control vulnerability in which an attacker can use the Device-Gateway service and bypass authorization, which could result in privilege escalation.
CVE-2023-1145PUBLISHED: 2023-03-27Delta Electronics InfraSuite Device Master versions prior to 1.0.5 are affected by a deserialization vulnerability targeting the Device-DataCollect service, which could allow deserialization of requests prior to authentication, resulting in remote code execution.
CVE-2023-1655PUBLISHED: 2023-03-27Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.4.0.
User Rank: Strategist
6/7/2021 | 1:21:54 AM
Number 1 is age discrimination. This is a major issue that has been widely studied. It's real, it exists and it cripples companies who cry about security shortage when they reject older and highly qualified candidates. There are plenty of subject matter experts in this area who can testify to the veracity of what I just said.
Number 2 is the hiring skills of recruiters, H.R. and the hiring managers is at best, (sorry to say) mediocre. To do their job properly, they must spend 10x more time combing through resumes and picking up the phone to make a call than they presently do.
The talent is out there, you just have to invest the time to find it and you must open your mind to older, smart and experienced workers. If you do this, the shortage is greatly diminished.
Blessings,
Harry