Delta Electronics Delta Industrial Automation DOPSoft DPS File wMailContentLen Buffer Overflow Remote Code Execution

CVE-2023-43817

Summary

A vulnerability exists in Delta Electronics' DOPSoft software version 2 that permits a buffer overflow when processing the wMailContentLen field of a specially crafted DPS file. This flaw can be exploited by an unauthorized user to lure victims into opening malformed DPS files, resulting in arbitrary code execution on the affected system. Organizations utilizing this software should evaluate their exposure and implement appropriate security measures to mitigate potential risks associated with this vulnerability.

References