Out-of-bounds Write Vulnerability in Delta Industrial Automation TPEditor
CVE-2018-17927

7.8HIGH

Key Information:

Vendor
CVE Published:
11 October 2018

Summary

In Delta Industrial Automation's TPEditor, multiple out-of-bounds write vulnerabilities exist in versions 1.90 and prior. These vulnerabilities can be triggered by processing specially crafted project files that lack proper user input validation. This can lead to unauthorized writing beyond the intended buffer area, potentially allowing attackers to execute remote code on the system, posing a significant risk to the integrity and security of the affected installations.

Affected Version(s)

Delta Industrial Automation TPEditor TPEditor Versions 1.90 and prior.

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.