CVE-2020-16219: Delta Industrial Automation TPEditor TPE File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
First published: Thu Aug 06 2020(Updated: )
Delta Electronics TPEditor Versions 1.97 and prior. An out-of-bounds read may be exploited by processing specially crafted project files. Successful exploitation of this vulnerability may allow an attacker to read/modify information, execute arbitrary code, and/or crash the application.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Delta Industrial Automation TPEditor | <=1.97 | |
| Delta Industrial Automation TPEditor | ||
| Delta Electronics TPEditor Versions 1.97 and prior |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of the Delta Industrial Automation TPEditor vulnerability?
The vulnerability ID is CVE-2020-16219.
What is the severity of CVE-2020-16219?
The severity of CVE-2020-16219 is high with a CVSS score of 7.8.
How can remote attackers exploit CVE-2020-16219?
Remote attackers can exploit CVE-2020-16219 by executing arbitrary code on affected installations of Delta Industrial Automation TPEditor, requiring user interaction such as visiting a malicious page or opening a malicious file.
What software is affected by CVE-2020-16219?
The Delta Industrial Automation TPEditor software with versions up to and including 1.97 is affected by CVE-2020-16219.
Is there a fix available for CVE-2020-16219?
It is recommended to apply the necessary security patches provided by Delta Industrial Automation to mitigate the vulnerability.
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/severity
- agent/weakness
- agent/title
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-20-961
- alias/ZDI-CAN-10128
- alias/CVE-2020-16219
- agent/software-canonical-lookup
- alias/ZDI-20-963
- alias/ZDI-CAN-8564
- agent/references
- collector/ics-cert-advisory
- source/ICS
- agent/tags
- agent/softwarecombine
- agent/event
- agent/trending
- vendor/deltaww
- canonical/delta industrial automation tpeditor
- version/delta industrial automation tpeditor/1.97
- vendor/delta industrial automation
- vendor/delta electronics
- canonical/delta electronics tpeditor versions 1.97 and prior