Delta Electronics DOPSoft

🗓️ 05 Jan 2021 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 42 Views

Delta Electronics DOPSoft software with versions up to 4.0.8.21 is prone to Out-of-bounds Write and Untrusted Pointer Dereference vulnerabilities. Successful exploitation may allow arbitrary code execution. Critical infrastructure sectors affected include Critical Manufacturing. Mitigations involve updating to DOPSoft v4.00.10.17, using secure network measures, and following recommended practices by CISA

Reporter	Title	Published	Views	Family All 27
CNNVD	Delta Electronics Industrial Automation DOPSoft 代码问题漏洞	5 Jan 202100:00	–	cnnvd
CNNVD	Delta Electronics Industrial Automation DOPSoft 缓冲区错误漏洞	5 Jan 202100:00	–	cnnvd
CNVD	DOPSoft Null Pointer Dereference Vulnerability	6 Jan 202100:00	–	cnvd
CNVD	DOPSoft Out-of-Bounds Write Vulnerability	6 Jan 202100:00	–	cnvd
CVE	CVE-2020-27275	11 Jan 202115:23	–	cve
CVE	CVE-2020-27277	11 Jan 202115:22	–	cve
Cvelist	CVE-2020-27275	11 Jan 202115:23	–	cvelist
Cvelist	CVE-2020-27277	11 Jan 202115:22	–	cvelist
EUVD	EUVD-2020-19788	7 Oct 202500:30	–	euvd
EUVD	EUVD-2020-19790	7 Oct 202500:30	–	euvd

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2021/icsa-21-005-05.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-21-005-05
us-cert	www.us-cert.cisa.gov/ics/alerts/ICS-ALERT-10-301-01
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
us-cert	www.us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B

05 Jan 2021 00:00Current

8.4High risk

Vulners AI Score8.4

CVSS 3.17.8

CVSS 29.3

EPSS0.00662