Delta Electronics Delta Industrial Automation DOPSoft DPS File wKPFStringLen Buffer Overflow Remote Code Execution

CVE-2023-43816

Summary

A critical buffer overflow vulnerability exists in Delta Electronics’ DOPSoft version 2 when processing the wKPFStringLen field in DPS files. This flaw can be exploited by an anonymous attacker who tempts a user into opening a specially devised DPS file. Such exploitation could lead to unauthorized code execution, potentially allowing the attacker to manipulate or gain control over the affected system.

References