PT-2021-2784 · Delta Industrial Automation · Commgr

Peter Cheng · Published 2021-04-21 · Updated 2021-05-07 · CVE-2021-27480

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Delta Industrial Automation COMMGR versions 1.12 and prior

Description The issue is related to a stack-based buffer overflow in the Delta Industrial Automation COMMGR software. This could allow a remote attacker to impact the confidentiality, integrity, and availability of protected information. The exploitation of this issue may enable an attacker to execute remote code.

Recommendations For versions 1.12 and prior, update to a version that fixes the stack-based buffer overflow issue to prevent potential remote code execution. As a temporary workaround, consider restricting access to the COMMGR software until a patch is available.

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2021-02327

CVE-2021-27480

Affected Products

Commgr

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2021-27480 · Security Note
• https://bdu.fstec.ru/vul/2021-02327 · Security Note
• https://osv.dev/vulnerability/CVE-2021-27480 · Vendor Advisory
• https://cybersecurity-help.cz/vdb/SB2021042146 · Note
• https://us-cert.gov/ics/advisories/icsa-21-110-03 · Note
• https://us-cert.cisa.gov/ics/advisories/icsa-21-110-03 · Note
• http://deltaww.com · Note
• https://t.me/cvenotify/14273 · Telegram Post
• https://t.me/cvenotify/13790 · Telegram Post