PT-2019-13379 · Delta Industrial Automation · Dopsoft

Kimiya · Published 2019-08-15 · Updated 2023-03-03 · CVE-2019-13513

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Delta Industrial Automation DOPSoft versions 4.00.06.15 and prior

Description The issue arises when processing a specially crafted project file, which may trigger multiple out-of-bounds read vulnerabilities. This could lead to information disclosure, remote code execution, or cause the application to crash.

Recommendations For versions 4.00.06.15 and prior, avoid processing untrusted or specially crafted project files until a fix is available. As a temporary workaround, consider restricting access to project file parsing functionality to minimize the risk of exploitation.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2019-13513

ZDI-19-718

ZDI-19-719

ZDI-19-720

ZDI-19-721

ZDI-19-722

Affected Products

Dopsoft

References · 9

• https://zerodayinitiative.com/advisories/ZDI-19-718 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-13513 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-19-719 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-19-721 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-19-722 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-19-720 · Security Note
• https://osv.dev/vulnerability/CVE-2019-13513 · Vendor Advisory
• https://t.me/cvenotify/45476 · Telegram Post
• https://us-cert.gov/ics/advisories/icsa-19-225-01 · Note