CVEvulnerability
CVE-2018-10623
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2018-06-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-125
Description
Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior performs read operations on a memory buffer where the position can be determined by a value read from a .dpa file. This may cause improper restriction of operations within the bounds of the memory buffer, allow remote code execution, alter the intended control flow, allow reading of sensitive information, or cause the application to crash.
Affected configurations
• deltaww delta industrial automation dopsoft (<= 4.00.04)
Related
Weakness · CWE (1)
- CWE-125 Out-of-bounds Read weakness
References
- http://www.securityfocus.com/bid/104375 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-151-01 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/104375 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-151-01 Third Party Advisory, US Government Resource