CVE-2021-33019: Delta Industrial Automation DOPSoft TBK File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
A stack-based buffer overflow vulnerability in Delta Electronics DOPSoft Version 4.00.11 and prior may be exploited by processing a specially crafted project file, which may allow an attacker to execute arbitrary code.
Other sources
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation DOPSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TBK files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this Delta Industrial Automation DOPSoft vulnerability?
The vulnerability ID of this Delta Industrial Automation DOPSoft vulnerability is CVE-2021-33019.
What is the severity of CVE-2021-33019?
The severity of CVE-2021-33019 is high with a CVSS score of 7.8.
How can remote attackers exploit CVE-2021-33019?
Remote attackers can exploit CVE-2021-33019 by executing arbitrary code on affected installations of Delta Industrial Automation DOPSoft through user interaction with a malicious page or file.
What is the affected software and version of CVE-2021-33019?
The affected software and version of CVE-2021-33019 is Delta Industrial Automation DOPSoft up to version 4.00.11.
Are there any references or advisories available for CVE-2021-33019?
Yes, there are references and advisories available for CVE-2021-33019. They can be found at the following links: [US-CERT Advisory](https://us-cert.cisa.gov/ics/advisories/icsa-21-238-04) and [Zero Day Initiative Advisory](https://www.zerodayinitiative.com/advisories/ZDI-21-1059/).