Cisa

**Name of the Vulnerable Software and Affected Versions** Delta Electronics DVP12SE PLCs (affected versions not specified) **Description** The Modbus TCP service contains a resource allocation issue where limits or throttling are not implemented. This lack of control over resource consumption can lead to system instability or denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Delta Electronics DVP12SE PLC (affected versions not specified) **Description** The device exposes a Modbus TCP service over a specified port without authentication or access control. This allows unauthenticated interaction with security-sensitive PLC functions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Delta Electronics DTM Soft (affected versions not specified) **Description** The software is susceptible to the deserialization of untrusted data, which can allow an attacker to execute arbitrary code. Real-world exploitation has been observed where attackers use malicious project files to achieve privilege escalation and lateral movement across industrial networks. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions ASDA-Soft (affected versions not specified) Description ASDA-Soft contains a stack-based buffer overflow issue. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Delta Electronics CNCSoft-G2 (affected versions not specified) **Description** Delta Electronics CNCSoft-G2 does not properly validate user-supplied files. An attacker can exploit this by having a user open a malicious file, potentially leading to code execution within the current process. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ASDA-Soft (affected versions not specified) **Description** ASDA-Soft contains a stack-based buffer overflow issue. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Delta Electronics DIAView (affected versions not specified) **Description** DIAView software contains a command injection issue. The software is susceptible to command injection, potentially allowing an attacker to execute arbitrary commands. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ASDA-Soft (affected versions not specified) **Description** The software contains a stack-based buffer overflow issue. This happens when input data is not properly validated, potentially allowing an attacker to overwrite the call stack with malicious data. Successful exploitation could result in arbitrary code execution or system crashes. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ASDA-Soft (affected versions not specified) **Description** A stack-based buffer overflow exists in ASDA-Soft, a software component used in industrial or enterprise environments. This allows an attacker to overwrite stack memory, potentially leading to arbitrary code execution or system crashes. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Delta Electronics DIAScreen (affected versions not specified) **Description** The software does not properly validate user-supplied files. An attacker can execute code within the current process if a user opens a malicious file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Delta Electronics DIAScreen (affected versions not specified) **Description** The software does not properly validate user-supplied files. An attacker can exploit this by providing a malicious file, which allows them to execute code within the current process when the file is opened by a user. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Delta Electronics DIAScreen (affected versions not specified) **Description** The software does not properly validate user-supplied files. An attacker can execute code within the current process if a user opens a malicious file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Delta Electronics DIAScreen (affected versions not specified) **Description** The software does not properly validate user-supplied files. An attacker can exploit this to execute code within the current process if a user opens a malicious file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Delta Electronics CNCSoft-G2 (affected versions not specified) **Description** The software does not properly validate user-supplied files. An attacker could execute code within the current process by having a user open a malicious file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Delta Electronics CNCSoft-G2 (affected versions not specified) **Description** The issue is related to a lack of proper validation of user-supplied files in Delta Electronics CNCSoft-G2. If a user opens a malicious file, an attacker can execute code in the context of the current process. This allows attackers to leverage the vulnerability for code execution via malicious files. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.