Lucene search

K
nvd[email protected]NVD:CVE-2023-0123
HistoryFeb 03, 2023 - 3:15 a.m.

CVE-2023-0123

2023-02-0303:15:08
CWE-121
CWE-787
web.nvd.nist.gov
4
delta electronics
dopsoft
buffer overflow
vulnerability
remote code execution

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

36.8%

Delta Electronics DOPSoft versions 4.00.16.22 and prior are vulnerable to a stack-based buffer overflow, which could allow an attacker to remotely execute arbitrary code when a malformed file is introduced to the software.

Affected configurations

Nvd
Node
deltawwdopsoftRange<4.00.16.22
VendorProductVersionCPE
deltawwdopsoft*cpe:2.3:a:deltaww:dopsoft:*:*:*:*:*:*:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

36.8%

Related for NVD:CVE-2023-0123