Stack-Based Buffer Overflow in Delta Electronics TPEditor
CVE-2020-16221

7.8HIGH

Key Information:

Vendor

Deltaww

Status
Delta Electronics Tpeditor
Vendor
CVE Published:
7 August 2020

What is CVE-2020-16221?

A stack-based buffer overflow exists in Delta Electronics' TPEditor, specifically affecting versions 1.97 and earlier. This vulnerability allows attackers to exploit specially crafted project files, potentially leading to unauthorized information access, modification of existing data, execution of arbitrary code, or even causing application crashes. It is crucial for users of TPEditor to upgrade to the latest version to mitigate risks associated with this vulnerability.

Affected Version(s)

Delta Electronics TPEditor TPEditor Versions 1.97 and prior

References

https://us-cert.cisa.gov/ics/advisories/icsa-20-219-04
x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-20-962/
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.