PT-2023-5870 · Delta Electronics · Wplsoft

Published 2023-10-09 · Updated 2024-05-17 · CVE-2023-5460

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Delta Electronics WPLSoft versions up to 2.51

Description A heap-based buffer overflow issue affects the Modbus Data Packet Handler component in Delta Electronics WPLSoft. This issue can be exploited by a remote attacker to cause a denial of service. The exploit has been disclosed to the public. The vendor was contacted about this disclosure but did not respond.

Recommendations For Delta Electronics WPLSoft versions up to 2.51, consider disabling the Modbus Data Packet Handler component as a temporary workaround until a patch is available. Restrict access to the affected component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

BDU:2023-06563

CVE-2023-5460

Affected Products

Wplsoft

References · 7

• 🔥 https://drive.google.com/drive/folders/1oYxs_KxK4Ftd7OsexGk6upkxhJ3-m8M3 · Exploit
• https://bdu.fstec.ru/vul/2023-06563 · Security Note
• https://osv.dev/vulnerability/CVE-2023-5460 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-5460 · Security Note
• https://vuldb.com/?ctiid.241583 · Note
• https://vuldb.com/?id.241583 · Note
• https://t.me/cibsecurity/71852 · Telegram Post