Description
If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetObjectInfo can be exploited, allowing the attacker to remotely execute arbitrary code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Delta Electronics | DIAScreen | < v1.5.0 | v1.5.0 |
Advisories 1
- ICSA-24-312-02 Delta Electronics DIAScreen CISA ICS & IT advisories · Nov 7, 2024