PT-2023-1349 · Delta Electronics · Diascreen

Natnael Samson + 2 · Published 2023-02-02 · Updated 2023-08-31 · CVE-2023-0251

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAScreen versions 1.2.1.23 and prior

Description The issue is related to a buffer overflow in memory due to improper restrictions of operations. This could allow an attacker to remotely execute arbitrary code.

Recommendations For Delta Electronics DIAScreen versions 1.2.1.23 and prior, consider restricting access to the system until a patch is available to prevent potential exploitation. As a temporary workaround, consider disabling any functionality that may trigger the buffer overflow until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2023-00661

CVE-2023-0251

ZDI-23-1294

ZDI-23-511

ZDI-23-514

ZDI-23-518

Affected Products

Diascreen

References · 8

• https://bdu.fstec.ru/vul/2023-00661 · Security Note
• https://osv.dev/vulnerability/CVE-2023-0251 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-0251 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-23-514 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-23-518 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-23-511 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-23-1294 · Security Note
• https://cisa.gov/uscert/ics/advisories/icsa-23-033-01 · Note