PT-2021-3763 · Delta Electronics · Diascreen

Kimiya · Published 2021-07-27 · Updated 2022-06-07 · CVE-2021-32969

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAScreen versions prior to 1.1.0

Description The issue is caused by a buffer overflow in dynamic memory, which may allow a remote attacker to execute arbitrary code by writing beyond the memory boundaries. This can result in a system crash or allow the attacker to remotely execute arbitrary code.

Recommendations For Delta Electronics DIAScreen versions prior to 1.1.0, update to version 1.1.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the system to minimize the risk of exploitation.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2021-04018

CVE-2021-32969

ZDI-21-1375

ZDI-22-023

ZDI-22-024

Affected Products

Diascreen

References · 10

• https://zerodayinitiative.com/advisories/ZDI-21-1375 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-22-024 · Security Note
• https://bdu.fstec.ru/vul/2021-04018 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-22-023 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-32969 · Security Note
• https://osv.dev/vulnerability/CVE-2021-32969 · Vendor Advisory
• https://cybersecurity-help.cz/vdb/SB2021072804 · Note
• https://cisa.gov/uscert/ics/advisories/icsa-21-208-05 · Note
• https://t.me/cibsecurity/43294 · Telegram Post
• https://us-cert.gov/ics/advisories/icsa-21-208-05 · Note