CWE
119 121
Advisory Published
Updated

CVE-2018-10594: Buffer Overflow

First published: Thu Jun 21 2018(Updated: )

Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPSimulator EH2, EH3, ES2, SE, SS2 and AHSIM_5x0, AHSIM_5x1) utilize a fixed-length stack buffer where an unverified length value can be read from the network packets via a specific network port, causing the buffer to be overwritten. This may allow remote code execution, cause the application to crash, or result in a denial-of-service condition in the application server.

Credit: ics-cert@hq.dhs.gov

Affected SoftwareAffected VersionHow to fix
Deltaww Commgr<=1.08
Deltaww Dvpsimulator Ahsim 5x0
Deltaww DVPSimulator AHSIM 5X1
Deltaww DVPSimulator EH2
Deltaww DVPSimulator
Deltaww DVPSimulator
Deltaww Dvpsimulator
Deltaww DVPSimulator

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the severity of CVE-2018-10594?

    CVE-2018-10594 is rated as a high-severity vulnerability due to its potential to lead to buffer overflow attacks.

  • How do I fix CVE-2018-10594?

    To mitigate CVE-2018-10594, upgrade Delta Industrial Automation COMMGR to version 1.09 or later.

  • What are the affected versions of Delta COMMGR in CVE-2018-10594?

    CVE-2018-10594 affects Delta COMMGR versions up to and including 1.08.

  • Which products are vulnerable along with Delta COMMGR in CVE-2018-10594?

    CVE-2018-10594 affects Delta COMMGR and does not impact the PLC Simulators listed in the provided information.

  • What type of attacks can result from CVE-2018-10594?

    CVE-2018-10594 can allow an attacker to execute arbitrary code due to improper verification of network packet lengths.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203