Delta Electronics Delta Industrial Automation DOPSoft DPS File wLogTitlesActionLen Buffer Overflow Remote Code Execution

CVE-2023-43821

Summary

A stack-based buffer overflow vulnerability has been identified in Delta Electronics Delta Industrial Automation DOPSoft related to the wLogTitlesActionLen field within a DPS file. An unauthenticated attacker can exploit this issue by tricking users into opening a maliciously crafted DPS file, leading to the execution of arbitrary code on the affected system. This vulnerability poses significant risks as successful exploitation may allow an attacker to gain unauthorized access and control over an affected device. Organizations using Delta DOPSoft should ensure their systems are updated and that users are educated on the risks of opening unknown DPS files.

References