ZDI-CAN-25225: ZDI-25-102: (0Day) Delta Electronics ISPSoft DVP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics ISPSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-25225?
ZDI-CAN-25225 has a high severity rating due to the potential for remote code execution on affected systems.
How do I fix ZDI-CAN-25225?
To mitigate ZDI-CAN-25225, update Delta Electronics ISPSoft to the latest version that addresses this vulnerability.
What software is affected by ZDI-CAN-25225?
ZDI-CAN-25225 affects installations of Delta Electronics ISPSoft.
What exploitation method is used in ZDI-CAN-25225?
ZDI-CAN-25225 requires user interaction, such as visiting a malicious page or opening a malicious file, to exploit the vulnerability.
What type of attacks can ZDI-CAN-25225 enable?
ZDI-CAN-25225 can enable remote attackers to execute arbitrary code on vulnerable installations.