First published: Mon Jun 18 2018(Updated: )
Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior utilizes a fixed-length stack buffer where a value larger than the buffer can be read from a .dpa file into the buffer, causing the buffer to be overwritten. This may allow remote code execution or cause the application to crash.
Credit: ics-cert@hq.dhs.gov
Affected Software | Affected Version | How to fix |
---|---|---|
Deltaww Delta Industrial Automation Dopsoft | <=4.00.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-10621 is a vulnerability found in Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior, which allows for a buffer overflow, potentially leading to remote code execution.
The severity of CVE-2018-10621 is rated as critical, with a severity score of 9.8 out of 10.
CVE-2018-10621 occurs when a value larger than the buffer size is read from a .dpa file into the buffer, overwriting it and potentially leading to remote code execution.
To fix CVE-2018-10621, users should update to a version of Delta Electronics Delta Industrial Automation DOPSoft that is not vulnerable.
More information about CVE-2018-10621 can be found at the following references: [SecurityFocus](http://www.securityfocus.com/bid/104375) and [ICSA-18-151-01](https://ics-cert.us-cert.gov/advisories/ICSA-18-151-01).