Delta Electronics Delta Industrial Automation DOPSoft DPS File InitialMacroLen Buffer Overflow Remote Code Execution
CVE-2023-43819

7.8HIGH

Key Information:

Vendor
Delta Electronics
Status
DOPSoft
Vendor
CVE Published:
18 January 2024

Summary

A vulnerability exists in Delta Electronics' DOPSoft software that allows a stack-based buffer overflow when parsing the InitialMacroLen field within a specially crafted DPS file. Attackers may exploit this weakness to execute arbitrary code remotely, posing significant risks to the security and integrity of systems utilizing this software. Users are advised to exercise caution when handling DPS files and to implement protective measures to mitigate potential attacks.

Affected Version(s)

DOPSoft 2.00.00.00 <= 2.00.07.04

References

https://blog.exodusintel.com/2024/01/18/delta-electronics...
third-party-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Exodus Intelligence
.