Stack-based Buffer Overflow in Delta Electronics Delta Industrial Automation Screen Editor
CVE-2017-16751

7.8HIGH

Key Information:

Vendor

Deltaww

Status
Delta Electronics Delta Industrial Automation Screen Editor
Vendor
CVE Published:
15 March 2018

What is CVE-2017-16751?

A stack-based buffer overflow vulnerability exists in Delta Electronics' Delta Industrial Automation Screen Editor. This vulnerability is triggered when specially crafted .dpb files are processed, which may allow an attacker to execute arbitrary code remotely. Systems using Version 2.00.23.00 or earlier of the editor are particularly at risk. It is crucial for users to patch their software to mitigate the risk posed by this vulnerability.

Affected Version(s)

Delta Electronics Delta Industrial Automation Screen Editor Delta Electronics Delta Industrial Automation Screen Editor

References

https://ics-cert.us-cert.gov/advisories/ICSA-18-004-01
x_refsource_MISC
http://www.securityfocus.com/bid/102426
vdb-entryx_refsource_BID

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.