Remote Code Execution Vulnerability in Delta Electronics TPEditor
CVE-2019-13544

7.8HIGH

Key Information:

Vendor
Delta Electronics
Status
Tpeditor
Vendor
CVE Published:
11 September 2019

Summary

Delta Electronics TPEditor, versions 1.94 and earlier, contain multiple out-of-bounds write vulnerabilities that can be exploited through specially crafted project files. Successful exploitation can result in the execution of arbitrary code, leading to serious security implications for users of the software.

Affected Version(s)

TPEditor 1.94 and prior

References

https://www.us-cert.gov/ics/advisories/icsa-19-253-01
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.