CVE-2019-13513: Delta Industrial Automation DOPSoft DPA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
First published: Thu Aug 15 2019(Updated: )
In Delta Industrial Automation DOPSoft, Version 4.00.06.15 and prior, processing a specially crafted project file may trigger multiple out-of-bounds read vulnerabilities, which may allow information disclosure, remote code execution, or crash of the application.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Deltaww Delta Industrial Automation Dopsoft | <=4.00.06.15 | |
| Delta Industrial Automation DOPSoft |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.us-cert.gov/ics/advisories/icsa-19-225-01
- https://www.zerodayinitiative.com/advisories/ZDI-19-719/
- https://www.zerodayinitiative.com/advisories/ZDI-19-722/
- https://www.zerodayinitiative.com/advisories/ZDI-19-721/
- https://www.zerodayinitiative.com/advisories/ZDI-19-718/
- https://www.zerodayinitiative.com/advisories/ZDI-19-720/
Frequently Asked Questions
What is CVE-2019-13513?
CVE-2019-13513 is a vulnerability that allows remote attackers to execute arbitrary code on affected instances of Delta Industrial Automation DOPSoft.
How does CVE-2019-13513 work?
CVE-2019-13513 can be exploited when the target visits a malicious page or opens a malicious file.
What is the severity of CVE-2019-13513?
CVE-2019-13513 has a severity rating of 7.8 (high).
Which software is affected by CVE-2019-13513?
Delta Industrial Automation DOPSoft versions up to 4.00.06.15 are affected by CVE-2019-13513.
How can I fix CVE-2019-13513?
To fix CVE-2019-13513, users should update to a patched version of Delta Industrial Automation DOPSoft.
- agent/type
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/references
- agent/title
- agent/weakness
- agent/severity
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-19-721
- alias/ZDI-CAN-8254
- alias/CVE-2019-13513
- agent/software-canonical-lookup
- alias/ZDI-19-722
- alias/ZDI-CAN-8282
- alias/ZDI-19-719
- alias/ZDI-CAN-8252
- alias/ZDI-19-720
- alias/ZDI-CAN-8253
- agent/softwarecombine
- alias/ZDI-19-718
- alias/ZDI-CAN-8251
- agent/event
- agent/trending
- agent/tags
- agent/source
- vendor/deltaww
- canonical/deltaww delta industrial automation dopsoft
- version/deltaww delta industrial automation dopsoft/4.00.06.15
- vendor/delta industrial automation
- canonical/delta industrial automation dopsoft