Skip to content
OpenAdvisories
High · 8.8 CVE-2023-43820 EUVD-2023-48185GHSA-c86f-jcmq-4qx2

Delta Electronics Delta Industrial Automation DOPSoft DPS File wLogTitlesPrevValueLen Buffer Overflow Remote Code Execution

Published Jan 18, 2024 · Updated Aug 29, 2024 · Assigned by XI

Description

A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesPrevValueLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to achieve remote code execution.

Affected products

VendorProductAffectedFixed
Delta Electronics DOPSoft 2.00.00.00 – ≤ 2.00.07.04 —

References