CVE-2018-14824 - Delta Electronics Delta Industrial Automation PMSoft v2.11 or prior has an out-of-bounds read vulnerability that can be executed when processing project files, which may allow an attacker to read confidential information

Back Back to CVE browser

MEDIUM

Delta Electronics Delta Industrial Automation PMSoft v2.11 or prior has an out-of-bounds read vulnerability that can be executed when processing project files, which may allow an attacker to read confidential information

Published Sep 27, 2018

6.5

MEDIUM

CVSS 3.0

EPSS 2.00%

Description

Delta Electronics Delta Industrial Automation PMSoft v2.11 or prior has an out-of-bounds read vulnerability that can be executed when processing project files, which may allow an attacker to read confidential information.

Affected products

Vendor Delta Electronics Product Delta Industrial Automation PMSoft Default
n/a
- Version
  v2.11 or prior
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Delta Electronics

Delta Industrial Automation PMSoft

n/a

Version	Status	Constraints
v2.11 or prior	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (3)

http://www.deltaww.com/services/DownloadCenter2.aspx?secID=8&pid=2&tid=0&CID=06&itemID=060301&typeID=1&downloadID=%2C&title=--%20Select%20Product%20Series%20--&dataType=8%3B&check=1&hl=en-US
x_refsource_MISC
http://www.securityfocus.com/bid/105409
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-270-04
x_refsource_MISCMitigationThird Party AdvisoryUS Government Resource

Link	Providers	Tags
http://www.deltaww.com/services/DownloadCenter2.aspx?secID=8&pid=2&tid=0&CID=06&itemID=060301&typeID=1&downloadID=%2C&title=--%20Select%20Product%20Series%20--&dataType=8%3B&check=1&hl=en-US		x_refsource_MISC
http://www.securityfocus.com/bid/105409		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-270-04		x_refsource_MISCMitigationThird Party AdvisoryUS Government Resource

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner icscert

Published Sep 27, 2018

Updated Sep 17, 2024

Reserved Aug 1, 2018

Link CVE-2018-14824

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-14824

Red Hat

Severity n/a

Public date n/a

Links CVE-2018-14824