ZDI-CAN-25008: ZDI-24-1468: Delta Electronics DIAScreen DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DIAScreen. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-47131.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-25008?
The ZDI-CAN-25008 vulnerability has a critical severity rating as it allows remote attackers to execute arbitrary code.
How do I fix ZDI-CAN-25008?
To fix ZDI-CAN-25008, ensure that you are using the latest version of Delta Electronics DIAScreen with relevant security updates applied.
What are the potential impacts of ZDI-CAN-25008?
The ZDI-CAN-25008 vulnerability can allow attackers to gain unauthorized access and control over the affected installations.
Is user interaction required to exploit ZDI-CAN-25008?
Yes, user interaction is required as targets must visit a malicious page or open a malicious file to exploit ZDI-CAN-25008.
Who is affected by ZDI-CAN-25008?
Organizations using Delta Electronics DIAScreen are potentially affected by the ZDI-CAN-25008 vulnerability.