Out-of-bounds Write Vulnerability in Delta Industrial Automation TPEditor
CVE-2018-17927
7.8HIGH
Summary
In Delta Industrial Automation's TPEditor, multiple out-of-bounds write vulnerabilities exist in versions 1.90 and prior. These vulnerabilities can be triggered by processing specially crafted project files that lack proper user input validation. This can lead to unauthorized writing beyond the intended buffer area, potentially allowing attackers to execute remote code on the system, posing a significant risk to the integrity and security of the affected installations.
Affected Version(s)
Delta Industrial Automation TPEditor TPEditor Versions 1.90 and prior.
References
CVSS V3.1
Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved