PT-2023-5870 · Delta Electronics · Wplsoft

CVE-2023-5460 · Publicado 2023-10-09 · Atualizado 2024-05-17

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Média

Vetor base

AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Delta Electronics WPLSoft versions up to 2.51

Description A heap-based buffer overflow issue affects the Modbus Data Packet Handler component in Delta Electronics WPLSoft. This issue can be exploited by a remote attacker to cause a denial of service. The exploit has been disclosed to the public. The vendor was contacted about this disclosure but did not respond.

Recommendations For Delta Electronics WPLSoft versions up to 2.51, consider disabling the Modbus Data Packet Handler component as a temporary workaround until a patch is available. Restrict access to the affected component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Heap Based Buffer Overflow

Enumeração de Fraquezas

CWE-122

Identificadores relacionados

BDU:2023-06563

CVE-2023-5460

Produtos afetados

Wplsoft

Referências · 7

• 🔥 https://drive.google.com/drive/folders/1oYxs_KxK4Ftd7OsexGk6upkxhJ3-m8M3 · Exploit
• https://vuldb.com/?ctiid.241583 · Nota
• https://bdu.fstec.ru/vul/2023-06563 · Nota de Segurança
• https://vuldb.com/?id.241583 · Nota
• https://osv.dev/vulnerability/CVE-2023-5460 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-5460 · Nota de Segurança
• https://t.me/cibsecurity/71852 · Publicação no Telegram