Heap-Based Buffer Overflow in Delta Electronics Automation TPEditor
CVE-2018-8871

9.8CRITICAL

Key Information:

Vendor
Delta Electronics
Status
Automation Tpeditor
Vendor
CVE Published:
25 May 2018

Summary

In Delta Electronics Automation TPEditor version 1.89 and earlier, an issue exists where parsing a malformed program file can lead to a heap-based buffer overflow. This vulnerability may allow an attacker to execute arbitrary code remotely, potentially compromising the integrity and availability of the affected system. Users of the software should apply the necessary updates to mitigate the risks associated with this vulnerability.

Affected Version(s)

Automation TPEditor Version 1.89 or prior

References

http://www.securityfocus.com/bid/104216
vdb-entryx_refsource_BID
https://ics-cert.us-cert.gov/advisories/ICSA-18-137-04
x_refsource_MISC

EPSS Score

5% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2018-8871 : Heap-Based Buffer Overflow in Delta Electronics Automation TPEditor | SecurityVulnerability.io