Skip to content
OpenAdvisories
High ICSA-25-010-03 3 CVEs

Delta Electronics DRASimuCAD (Update A)

Published Jan 9, 2025 · Updated Jan 16, 2025 · Revision 2

Vendor: Delta Electronics Product: DRASimuCAD

Summary

Successful exploitation of these vulnerabilities could crash the device or potentially allow remote code execution.

Vulnerabilities 3

  • High 7.8
    CVE-2024-12834

    Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability

    Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DRASimuCAD. User interaction is required to e…

    Delta Electronics DRASimuCAD ICS / OT
  • High 7.8
    CVE-2024-12835

    Delta Electronics DRASimuCAD ICS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

    Delta Electronics DRASimuCAD ICS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DRASimuCAD. User interaction is required…

    Delta Electronics DRASimuCAD ICS / OT
  • High 7.8
    CVE-2024-12836

    Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability

    Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DRASimuCAD. User interaction is required to e…

    Delta Electronics DRASimuCAD ICS / OT

Revision history

  1. #2

    Update A - Patch available to fix vulnerabilities.

  2. #1

    Initial Publication

References