Delta Industrial Automation DOPSoft (Update A)

🗓️ 30 Jun 2020 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 65 Views

Delta Industrial Automation DOPSoft Update A advisory outlines vulnerabilities in affected versions, ranging from out-of-bounds read to heap-based buffer overflow, allowing unauthorized access and arbitrary code execution, impacting worldwide deployment within critical manufacturing sectors. Mitigations include software update to version 4.00.08.21 and restricting application interaction with trusted files

Reporter	Title	Published	Views	Family All 16
CNVD	Insulet Omnipod Insulin Management System Access Control Error Vulnerability	20 Mar 202000:00	–	cnvd
CNVD	Delta Industrial Automation DOPSoft Buffer Overflow Vulnerability (CNVD-2021-36604)	1 Jul 202000:00	–	cnvd
CVE	CVE-2020-10597	20 Mar 202014:27	–	cve
CVE	CVE-2020-14482	30 Jun 202017:43	–	cve
Cvelist	CVE-2020-10597	20 Mar 202014:27	–	cvelist
Cvelist	CVE-2020-14482	30 Jun 202017:43	–	cvelist
EUVD	EUVD-2020-3045	7 Oct 202500:30	–	euvd
EUVD	EUVD-2020-6618	7 Oct 202500:30	–	euvd
NVD	CVE-2020-10597	20 Mar 202015:15	–	nvd
NVD	CVE-2020-14482	30 Jun 202018:15	–	nvd

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2020/icsa-20-182-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-20-182-01
us-cert	www.us-cert.gov/ncas/tips/ST04-014
us-cert	www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
us-cert	www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B

30 Jun 2020 00:00Current

8.3High risk

Vulners AI Score8.3

CVSS 26.8

CVSS 3.17.8

EPSS0.02591