ZDI-CAN-27128: ZDI-25-976: Delta Electronics ASDA-Soft PAR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

Published Oct 29, 2025

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics ASDA-Soft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-62580.

Affected Software

1 affected component

Delta Electronics ASDA-Soft

Event History

Oct 29, 2025

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-27128?

ZDI-CAN-27128 is a critical vulnerability that allows remote code execution.

How do I fix ZDI-CAN-27128?

To fix ZDI-CAN-27128, ensure that you apply the latest security patches provided by Delta Electronics for ASDA-Soft.

Who is affected by ZDI-CAN-27128?

ZDI-CAN-27128 affects installations of Delta Electronics ASDA-Soft software.

What type of attack does ZDI-CAN-27128 facilitate?

ZDI-CAN-27128 facilitates remote code execution attacks that require user interaction.

What is required to exploit ZDI-CAN-27128?

To exploit ZDI-CAN-27128, a user must visit a malicious webpage or open a malicious file.