Skip to content
OpenAdvisories
High ICSA-24-312-02 3 CVEs

Delta Electronics DIAScreen

Published Nov 7, 2024 · Updated Nov 7, 2024

Vendor: Delta Electronics Product: DIAScreen

Summary

Successful exploitation of this these vulnerabilities could crash the device being accessed; a buffer overflow condition may allow remote code execution.

Vulnerabilities 3

  • High 7.8
    CVE-2024-39354

    Delta Electronics DIAScreen Stack-based Buffer Overflow

    If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in CEtherIPTagItem can be exploited, allowing the attacker to remotely execute arbitrary code.

    Delta Electronics DIAScreen ICS / OT
  • High 7.8
    CVE-2024-39605

    Delta Electronics DIAScreen Stack-based Buffer Overflow

    If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetParameter can be exploited, allowing the attacker to remotely execute arbitrary code.

    Delta Electronics DIAScreen ICS / OT
  • High 7.8
    CVE-2024-47131

    Delta Electronics DIAScreen Stack-based Buffer Overflow

    If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetObjectInfo can be exploited, allowing the attacker to remotely execute arbitrary code.

    Delta Electronics DIAScreen ICS / OT

Revision history

  1. #1

    Initial Publication

References