PT-2025-18244 · Delta Electronics · Ispsoft

Published 2025-04-30 · Updated 2025-05-05 · CVE-2025-4124

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Delta Electronics ISPSoft version 3.20

Description The issue is related to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitrary code when parsing an ISP file. This vulnerability is considered HIGH severity.

Recommendations For Delta Electronics ISPSoft version 3.20, update to a version that fixes the Out-Of-Bounds Write vulnerability to prevent arbitrary code execution when parsing ISP files. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2025-4124

Affected Products

Ispsoft

References · 10

• https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00004_ISPSoft%20-%20Multiple%20Vulnerabilities_v2.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-4124 · Security Note
• https://osv.dev/vulnerability/CVE-2025-4124 · Vendor Advisory
• https://t.me/latest_high_impact_cve/2227 · Telegram Post
• https://t.me/cvedetector/24073 · Telegram Post
• https://twitter.com/CVEnew/status/1917500958809915433 · Twitter Post
• https://t.me/cvetracker/22680 · Telegram Post
• https://twitter.com/cybercronai/status/1917548346979369130 · Twitter Post
• https://twitter.com/cracbot/status/1919346431871119729 · Twitter Post
• https://t.me/cvenotify/120278 · Telegram Post