CVEvulnerability
CVE-2018-17929
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-10-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-121, CWE-787
Description
In Delta Industrial Automation TPEditor, TPEditor Versions 1.90 and prior, multiple stack-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files lacking user input validation before copying data from project files onto the stack and may allow an attacker to remotely execute arbitrary code.
Affected configurations
• deltaww tpeditor (<= 1.90)
Related
References
- http://www.securityfocus.com/bid/105682 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-284-03 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/105682 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-284-03 Third Party Advisory, US Government Resource