Delta Electronics Delta Industrial Automation DOPSoft DPS File wLogTitlesPrevValueLen Buffer Overflow Remote Code Execution

CVE-2023-43820

Summary

A stack-based buffer overflow vulnerability exists in Delta Electronics' Delta Industrial Automation DOPSoft application when processing the wLogTitlesPrevValueLen field within a DPS file. An unauthenticated attacker could exploit this flaw by tricking a user into opening a specially crafted DPS file. Successful exploitation may lead to the execution of arbitrary code on the affected system, potentially compromising sensitive data and allowing unauthorized control over the system.

References