PT-2018-16982 · Delta Electronics · Dopsoft
Ghirmay Desta
·
Publicado
2018-03-02
·
Atualizado
2020-09-18
·
CVE-2018-5476
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Delta Electronics Delta Industrial Automation DOPSoft version 4.00.01 or prior
Description
A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial Automation DOPSoft. This issue is caused by processing specially crafted .dop or .dpb files, which may allow an attacker to remotely execute arbitrary code.
Recommendations
For Delta Electronics Delta Industrial Automation DOPSoft version 4.00.01 or prior, update to a version later than 4.00.01 to resolve the issue.
As a temporary workaround, consider avoiding the use of specially crafted .dop or .dpb files until a patch is available.
Restrict access to the DOPSoft application to minimize the risk of exploitation.
Correção
Stack Overflow
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Dopsoft