CVE-2018-17927

7.8HIGH

Key Information:

Vendor
Delta Electronics
Status
Delta Industrial Automation Tpeditor
Vendor
CVE Published:
11 October 2018

Summary

In Delta Industrial Automation TPEditor, TPEditor Versions 1.90 and prior, multiple out-of-bounds write vulnerabilities may be exploited by processing specially crafted project files lacking user input validation, which may cause the system to write outside the intended buffer area and may allow remote code execution.

Affected Version(s)

Delta Industrial Automation TPEditor TPEditor Versions 1.90 and prior.

References

http://www.securityfocus.com/bid/105682
vdb-entryx_refsource_BID
https://ics-cert.us-cert.gov/advisories/ICSA-18-284-03
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.