Delta Electronics Delta Industrial Automation DOPSoft DPS File wTitleTextLen Buffer Overflow Remote Code Execution

CVE-2023-43824

Summary

A stack-based buffer overflow has been identified in Delta Electronics' Delta Industrial Automation DOPSoft when handling the wTitleTextLen field during DPS file parsing. This vulnerability can be exploited by a remote and unauthenticated attacker who tricks a user into opening a specially crafted DPS file. This exploitation can potentially lead to remote code execution, posing significant risks to affected systems. Users and organizations using the DOPSoft software should be aware of this issue and consider applying appropriate security measures.

References