Skip to content
OpenAdvisories
High · 8.8 CVE-2023-43821 EUVD-2023-48186GHSA-vh2f-9g4r-xhjf

Delta Electronics Delta Industrial Automation DOPSoft DPS File wLogTitlesActionLen Buffer Overflow Remote Code Execution

Published Jan 18, 2024 · Updated Oct 21, 2024 · Assigned by XI

Description

A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesActionLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to achieve remote code execution.

Affected products

VendorProductAffectedFixed
Delta Electronics DOPSoft 2.00.00.00 – ≤ 2.00.07.04 —

References