PT-2025-18242 · Delta Electronics · Ispsoft

Published 2025-04-30 · Updated 2025-08-25 · CVE-2025-22884

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Delta Electronics ISPSoft version 3.20

Description The issue is a Stack-Based buffer overflow vulnerability that could allow an attacker to execute arbitrary code when parsing a DVP file. This vulnerability is related to the parsing of DVP files, which could lead to arbitrary code execution.

Recommendations For Delta Electronics ISPSoft version 3.20, consider avoiding the parsing of DVP files until a patch is available. As a temporary workaround, restrict the functionality related to DVP file parsing to minimize the risk of exploitation.

Fix

Memory Corruption

Stack Overflow

Weakness Enumeration

CWE-787

CWE-121

Related Identifiers

BDU:2025-11430

CVE-2025-22884

Affected Products

Ispsoft

References · 18

• https://bdu.fstec.ru/vul/2025-11430 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/720590 · Security Note
• https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00004_ISPSoft%20-%20Multiple%20Vulnerabilities_v1.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-22884 · Security Note
• https://osv.dev/vulnerability/CVE-2025-22884 · Vendor Advisory
• https://twitter.com/centry_agent/status/1917510113717543207 · Twitter Post
• https://twitter.com/centry_agent/status/1924003151470076280 · Twitter Post
• https://twitter.com/cracbot/status/1919346430306562052 · Twitter Post
• https://t.me/cvenotify/122632 · Telegram Post
• https://t.me/cvedetector/24078 · Telegram Post
• https://vuldb.com/?id.306607 · Note
• https://twitter.com/CVEnew/status/1917486751641383297 · Twitter Post
• https://t.me/cvenotify/120276 · Telegram Post
• https://t.me/latest_high_impact_cve/2226 · Telegram Post
• https://t.me/cvetracker/22678 · Telegram Post