PT-2024-38392 · Delta Electronics · Delta Electronics Diascreen

Nattisamson · Published 2024-08-06 · Updated 2024-09-05 · CVE-2024-7502

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAScreen (affected versions not specified)

Description A crafted DPA file could force Delta Electronics DIAScreen to overflow a stack-based buffer, which could allow an attacker to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Stack Overflow

Weakness Enumeration

CWE-787

CWE-121

Related Identifiers

CVE-2024-7502

ZDI-24-1166

ZDI-24-1167

ZDI-24-1168

ZDI-24-1169

ZDI-24-1170

ZDI-24-1171

ZDI-24-1172

ZDI-24-1173

ZDI-24-1174

ZDI-24-1175

ZDI-24-1193

Affected Products

Delta Electronics Diascreen

References · 16

• https://zerodayinitiative.com/advisories/ZDI-24-1172 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-24-1174 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-24-1168 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-24-1170 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-24-1171 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-24-1167 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-24-1166 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-7502 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-24-1193 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-24-1175 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-24-1169 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-24-1173 · Security Note
• https://osv.dev/vulnerability/CVE-2024-7502 · Vendor Advisory
• https://cisa.gov/news-events/ics-advisories/icsa-24-219-01 · Note
• https://t.me/cvedetector/2621 · Telegram Post