Delta Electronics Delta Industrial Automation DOPSoft DPS File wTTitleLen Buffer Overflow Remote Code Execution

CVE-2023-43823

Summary

A stack based buffer overflow vulnerability has been identified in Delta Electronics' Delta Industrial Automation DOPSoft software. The issue arises during the parsing of the wTTitleLen field within specially crafted DPS files. An attacker, without needing any authentication, can exploit this weakness by convincing a user to open a malicious DPS file. This exploitation can lead to remote code execution on the affected systems, potentially compromising the integrity and confidentiality of sensitive data.

References