Skip to content
OpenAdvisories
High 1 exploited CVE ICSA-21-252-02 3 CVEs

Delta Electronics DOPSoft 2 (Update A)

Published Sep 9, 2021 · Updated Sep 9, 2021

Vendor: Delta Electronics Product: DOPSoft 2

Summary

Successful exploitation of these vulnerabilities may allow arbitrary code execution.

Vulnerabilities 3

  • High 7.8
    CVE-2021-38406 Exploited EPSS 76%

    Delta Electronics DOPSoft 2 Out-of-Bounds Write

    Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could result in multiple out-of-bounds write instances. An attacker could leverage this vulnerability to execute cod…

    Delta Electronics DOPSoft 2 ICS / OT
    KEV Aug 25, 2022
  • High 7.8
    CVE-2021-38402

    Delta Electronics DOPSoft 2 Stack-Based Buffer Overflow

    Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could lead to a stack-based buffer overflow while trying to copy to a buffer during font string handling. An attacke…

    Delta Electronics DOPSoft 2 ICS / OT
  • High 7.8
    CVE-2021-38404

    Delta Electronics DOPSoft 2 Heap-based Buffer Overflow

    Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could result in a heap-based buffer overflow. An attacker could leverage this vulnerability to execute code in the c…

    Delta Electronics DOPSoft 2 ICS / OT

Revision history

  1. #1

    ICSA-21-252-02 Delta Electronics DOPSoft 2

References