CVE-2018-17929

7.8HIGH

Key Information:

Vendor
Delta Electronics
Status
Delta Industrial Automation Tpeditor
Vendor
CVE Published:
11 October 2018

Summary

In Delta Industrial Automation TPEditor, TPEditor Versions 1.90 and prior, multiple stack-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files lacking user input validation before copying data from project files onto the stack and may allow an attacker to remotely execute arbitrary code.

Affected Version(s)

Delta Industrial Automation TPEditor TPEditor Versions 1.90 and prior.

References

http://www.securityfocus.com/bid/105682
vdb-entryx_refsource_BID
https://ics-cert.us-cert.gov/advisories/ICSA-18-284-03
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.