CVE-2023-43816 - Delta Electronics Delta Industrial Automation DOPSoft DPS File wKPFStringLen Buffer Overflow Remote Code Execution

Back Back to CVE browser

HIGH

Delta Electronics Delta Industrial Automation DOPSoft DPS File wKPFStringLen Buffer Overflow Remote Code Execution

Published Jan 18, 2024

7.8

HIGH

CVSS 3.1

EPSS 0.41%

Description

A buffer overflow vulnerability exists in Delta Electronics Delta Industrial Automation DOPSoft version 2 when parsing the wKPFStringLen field of a DPS file. An anonymous attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to achieve code execution.

Affected products

Vendor Delta Electronics Product DOPSoft Default
unaffected
- Version
  2.00.00.00
  Status
  affected
  Constraints
  <=2.00.07.04

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Delta Electronics

DOPSoft

unaffected

Version	Status	Constraints
2.00.00.00	affected	<=2.00.07.04

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-120

Classic Buffer Overflow

References (2)

https://blog.exodusintel.com/2024/01/18/delta-electronics-delta-industrial-automation-dopsoft-dps-file-wkpfstringlen-buffer-overflow-remote-code-execution/
third-party-advisoryThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-48181
Advisory

Link	Providers	Tags
https://blog.exodusintel.com/2024/01/18/delta-electronics-delta-industrial-automation-dopsoft-dps-file-wkpfstringlen-buffer-overflow-remote-code-execution/		third-party-advisoryThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-48181		Advisory