Lucene search

K
nvd[email protected]NVD:CVE-2024-7502
HistoryAug 06, 2024 - 5:15 p.m.

CVE-2024-7502

2024-08-0617:15:54
CWE-121
CWE-787
web.nvd.nist.gov
2
crafted dpa file
stack-based buffer overflow
delta electronics diascreen
arbitrary code execution

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

52.9%

A crafted DPA file could force Delta Electronics DIAScreen to overflow a stack-based buffer, which could allow an attacker to execute arbitrary code.

Affected configurations

Nvd
Node
deltawwdiascreenRange<1.4.2
VendorProductVersionCPE
deltawwdiascreen*cpe:2.3:a:deltaww:diascreen:*:*:*:*:*:*:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

52.9%

Related for NVD:CVE-2024-7502