Skip to content
OpenAdvisories
High · 8.8 CVE-2023-43824 EUVD-2023-48189GHSA-6358-wh5x-64mg

Delta Electronics Delta Industrial Automation DOPSoft DPS File wTitleTextLen Buffer Overflow Remote Code Execution

Published Jan 18, 2024 · Updated Sep 12, 2024 · Assigned by XI

Description

A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wTitleTextLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to achieve remote code execution.

Affected products

VendorProductAffectedFixed
Delta Electronics DOPSoft 2.00.00.00 – ≤ 2.00.07.04 —

References