High ICSA-19-253-01 3 CVEs

Delta Electronics TPEditor

Published Sep 10, 2019 · Updated Sep 10, 2019

Vendor: Delta Electronics Product: TPEditor

Summary

Successful exploitation of these vulnerabilities may allow information disclosure, remote code execution, or may crash the application.

Vulnerabilities 3

Unscored —

CVE-2019-13536

Delta Electronics TPEditor, Versions 1.94 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploit…

Delta Electronics TPEditor ICS / OT

Sep 11, 2019
Unscored —

CVE-2019-13540

Delta Electronics TPEditor, Versions 1.94 and prior. Multiple stack-based buffer overflow vulnerabilities may be exploi…

Delta Electronics TPEditor ICS / OT

Sep 11, 2019
Unscored —

CVE-2019-13544

Delta Electronics TPEditor, Versions 1.94 and prior. Multiple out-of-bounds write vulnerabilities may be exploited by p…

Delta Electronics TPEditor ICS / OT

Sep 11, 2019

Revision history

2019-09-10 #1
ICSA-19-253-01 Delta Electronics TPEditor

References

ICS Advisory ICSA-19-253-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-19-253-01
Recommended Practices
https://www.us-cert.gov/ncas/tips/ST04-014
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B