CVE-2018-7507: Buffer Overflow
WPLSoft in Delta Electronics versions 2.45.0 and prior utilizes a fixed length heap buffer where a value larger than the buffer can be read from a file into the buffer, causing the buffer to be overwritten, which may allow remote code execution or cause the application to crash.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-7507?
CVE-2018-7507 is a vulnerability in WPLSoft, a software used in Delta Electronics versions 2.45.0 and prior, which allows a remote attacker to execute arbitrary code or crash the application by overwriting a fixed length heap buffer.
How severe is CVE-2018-7507?
CVE-2018-7507 has a severity rating of 8.8 (high).
What is the affected software by CVE-2018-7507?
The affected software by CVE-2018-7507 is WPLSoft version 2.45.0 and prior, developed by Delta Electronics.
How can an attacker exploit CVE-2018-7507?
An attacker can exploit CVE-2018-7507 by providing a file with a value larger than the buffer size, which can overwrite the buffer, potentially leading to remote code execution or application crashes.
Is there a fix available for CVE-2018-7507?
Yes, please refer to the official advisories from Delta Electronics and ICS-CERT for information on how to apply the necessary patches or updates to address CVE-2018-7507.