Type Confusion Vulnerability in Delta Electronics Delta Industrial Automation Screen Editor
CVE-2017-16745

7.8HIGH

Key Information:

Vendor

Deltaww

Status
Delta Electronics Delta Industrial Automation Screen Editor
Vendor
CVE Published:
15 March 2018

What is CVE-2017-16745?

A type confusion vulnerability exists in the Delta Industrial Automation Screen Editor that affects versions 2.00.23.00 and earlier. This flaw arises when the system processes specially crafted .dpb files, allowing attackers to potentially execute arbitrary code remotely due to incompatible type access. Users are advised to review their software version and apply necessary patches to mitigate the risk.

Affected Version(s)

Delta Electronics Delta Industrial Automation Screen Editor Delta Electronics Delta Industrial Automation Screen Editor

References

https://ics-cert.us-cert.gov/advisories/ICSA-18-004-01
x_refsource_MISC
http://www.securityfocus.com/bid/102426
vdb-entryx_refsource_BID

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.