Skip to content
OpenAdvisories
Medium · 6.3 CVE-2023-43816 EUVD-2023-48181GHSA-fr6v-xvf6-fpc3

Delta Electronics Delta Industrial Automation DOPSoft DPS File wKPFStringLen Buffer Overflow Remote Code Execution

Published Jan 18, 2024 · Updated Nov 13, 2024 · Assigned by XI

Description

A buffer overflow vulnerability exists in Delta Electronics Delta Industrial Automation DOPSoft version 2 when parsing the wKPFStringLen field of a DPS file. An anonymous attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to achieve code execution.

Affected products

VendorProductAffectedFixed
Delta Electronics DOPSoft 2.00.00.00 – ≤ 2.00.07.04 —

References