Improper Input Validation in Delta Electronics TPEditor Affects Application Security
CVE-2020-16227

7.8HIGH

Key Information:

Vendor

Deltaww

Status
Delta Electronics Tpeditor
Vendor
CVE Published:
7 August 2020

What is CVE-2020-16227?

Delta Electronics TPEditor is susceptible to an improper input validation vulnerability that can be exploited by processing specially crafted project files. This vulnerability allows attackers to manipulate data entered by users, potentially leading to unauthorized access and modification of sensitive information, execution of arbitrary code, or a crash of the application. Users should exercise caution when handling project files and ensure that they are using the latest versions of the software to mitigate these risks.

Affected Version(s)

Delta Electronics TPEditor TPEditor Versions 1.97 and prior

References

https://us-cert.cisa.gov/ics/advisories/icsa-20-219-04
x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-20-965/
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.