Delta Electronics ISPSoft Heap Buffer-Overflow
CVE-2023-5131

8.8HIGH

Key Information:

Vendor
Delta Electronics
Status
ISPSoft
Vendor
CVE Published:
18 January 2024

Summary

A vulnerability identified in Delta Electronics ISPSoft software allows for a heap buffer overflow. This flaw can be exploited by attackers who trick users into opening a specially crafted DVP file, leading to the execution of arbitrary code. The potential for unauthorized access and remote execution underlines the urgency for users and administrators to assess their systems for this vulnerability.

Affected Version(s)

ISPSoft 3.02.11

References

https://blog.exodusintel.com/2024/01/18/delta-electronics...
third-party-advisory

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Exodus Intelligence
.