ZDI-CAN-22331: ZDI-24-1721: Delta Electronics DTM Soft BIN File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability

Published Dec 20, 2024

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DTM Soft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-12677.

Affected Software

1 affected component

Delta Electronics DTM Soft

Event History

Dec 20, 2024

Advisory Published

via ZDI·06:00 AM

Data Sourced

via ZDI·06:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-22331?

The severity of ZDI-CAN-22331 is critical due to its ability to allow remote code execution.

How do I fix ZDI-CAN-22331?

To fix ZDI-CAN-22331, ensure that you update Delta Electronics DTM Soft to the latest version that includes security patches.

Who is affected by ZDI-CAN-22331?

ZDI-CAN-22331 affects installations of Delta Electronics DTM Soft.

Is user interaction required for ZDI-CAN-22331?

Yes, user interaction is required for ZDI-CAN-22331, such as visiting a malicious page or opening a malicious file.

What can happen if ZDI-CAN-22331 is exploited?

If exploited, ZDI-CAN-22331 allows attackers to execute arbitrary code on the affected systems.