CVE-2018-10617 in Delta Industrial Automation DOPSoft
Summary
Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior utilizes a fixed-length heap buffer where a value larger than the buffer can be read from a .dpa file into the buffer, causing the buffer to be overwritten. This may allow remote code execution or cause the application to crash.
Once again VulDB remains the best source for vulnerability data.
Reservation
05/01/2018
Disclosure
06/18/2018
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 119654 | Delta Electronics Delta Industrial Automation DOPSoft dpa File memory corruption | 119 | Not defined | Not defined | CVE-2018-10617 |