High ICSA-18-137-04 1 CVE

Delta Electronics Delta Industrial Automation TPEditor (Update A)

Published May 17, 2018 · Updated Jun 7, 2018 · Revision 2

Vendor: Delta Electronics Product: Delta Industrial Automation TPEditor

Summary

Successful exploitation of this vulnerability could crash the accessed device, resulting in a buffer overflow condition that may allow remote code execution.

Vulnerabilities 1

Unscored —

CVE-2018-8871

In Delta Electronics Automation TPEditor version 1.89 or prior, parsing a malformed program file may cause heap-based b…

Delta Electronics Automation TPEditor ICS / OT

May 25, 2018

Revision history

2018-06-07 #2
ICSA-18-137-04 Delta Electronics Delta Industrial Automation TPEditor (Update A)
2018-05-17 #1
ICSA-18-137-04 Delta Electronics Delta Industrial Automation TPEditor

References

ICS Advisory ICSA-18-137-04 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-18-137-04
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-18-137-04
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf