Lucene search
+L

2780 matches found

Positive Technologies
Positive Technologies
•added 2023/10/09 12:00 a.m.•26 views

PT-2023-32115 · Delta Electronics · Dvp32Es2 Plc

Name of the Vulnerable Software and Affected Versions: Delta Electronics DVP32ES2 PLC version 1.48 Description: A critical issue has been found in the Password Transmission Handler component, which can be manipulated to cause denial of service. The exploit for this issue has been disclosed...

7.5CVSS6.9AI score0.01074EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2023/10/09 12:00 a.m.•24 views

PT-2023-32116 · Delta Electronics · Wplsoft

Name of the Vulnerable Software and Affected Versions: Delta Electronics WPLSoft version 2.51 Description: A vulnerability was found in the Modbus Handler component, leading to cleartext transmission of sensitive information. The attack can be launched remotely, with a rather high complexity and...

5.9CVSS6.8AI score0.0049EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2023/10/09 12:00 a.m.•21 views

Delta Electronics DVP32ES2 PLC Security Vulnerability

The Delta Electronics DVP32ES2 PLC is a programmable logic controller PLC from Delta Electronics of Taiwan, China. A security vulnerability exists in Delta Electronics DVP32ES2 PLC version 1.48. An attacker could exploit the vulnerability to cause a denial of service on the system...

7.5CVSS6.6AI score0.01074EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/09 12:00 a.m.•7 views

CVE-2023-5461: Cleartext Transmission of Sensitive Information

A vulnerability was found in Delta Electronics WPLSoft 2.51. It has been classified as problematic. Affected is an unknown function of the component Modbus Handler. The manipulation leads to cleartext transmission of sensitive information. It is possible to launch the attack remotely. The...

5.9CVSS4.6AI score0.0049EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/09 12:00 a.m.•6 views

CVE-2023-5460: Heap-based Buffer Overflow

A vulnerability was found in Delta Electronics WPLSoft up to 2.51 and classified as problematic. This issue affects some unknown processing of the component Modbus Data Packet Handler. The manipulation leads to heap-based buffer overflow. The exploit has been disclosed to the public and may be...

5.7CVSS5.3AI score0.00447EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/09 12:00 a.m.•5 views

CVE-2023-5459: Improper Resource Shutdown or Release

A vulnerability has been found in Delta Electronics DVP32ES2 PLC 1.48 and classified as critical. This vulnerability affects unknown code of the component Password Transmission Handler. The manipulation leads to denial of service. The exploit has been disclosed to the public and may be used...

7.5CVSS6.2AI score0.01074EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/10/09 12:00 a.m.•24 views

Delta Electronics WPLSoft Security Vulnerability

Delta Electronics WPLSoft is a software tool for programming Delta Programmable Logic Controllers PLCs from Delta Electronics, Inc. of Taiwan, China. A security vulnerability exists in Delta Electronics WPLSoft version 2.51, which originates from the transmission of sensitive information in clear...

5.9CVSS6.5AI score0.0049EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
•added 2023/10/05 12:00 a.m.•26 views

Delta Electronics DIAEnergie HandlerUploadCarbon Use Of Hard-Coded Credentials Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Delta Electronics DIAEnergie. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of requests to the HandlerUploadCarbon endpoint. The issue...

9.8CVSS9.5AI score0.02EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/10/05 12:00 a.m.•27 views

Delta Electronics DIAEnergie HandlerUploadCalendar Use Of Hard-Coded Credentials Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Delta Electronics DIAEnergie. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of requests to the HandlerUploadCalendar endpoint. The issue...

9.8CVSS9.5AI score0.02EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/10/05 12:00 a.m.•29 views

Delta Electronics DIAEnergie HandlerUploadTag Use Of Hard-Coded Credentials Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Delta Electronics DIAEnergie. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of requests to the HandlerUploadTag endpoint. The issue resul...

9.8CVSS9.5AI score0.02EPSS
SaveExploits0References1
OSV
OSV
•added 2023/09/21 11:15 p.m.•14 views

CVE-2023-5068

Delta Electronics DIAScreen may write past the end of an allocated buffer while parsing a specially crafted input file. This could allow an attacker to execute code in the context of the current process...

7.8CVSS5.9AI score0.00232EPSS
SaveExploits0References2
NVD
NVD
•added 2023/09/21 11:15 p.m.•39 views

CVE-2023-5068

Delta Electronics DIAScreen may write past the end of an allocated buffer while parsing a specially crafted input file. This could allow an attacker to execute code in the context of the current process...

7.8CVSS7.7AI score0.00232EPSS
SaveExploits0References2
Prion
Prion
•added 2023/09/21 11:15 p.m.•29 views

Design/Logic Flaw

Delta Electronics DIAScreen may write past the end of an allocated buffer while parsing a specially crafted input file. This could allow an attacker to execute code in the context of the current process...

4.4CVSS7.6AI score0.00232EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/09/21 10:01 p.m.•42 views

CVE-2023-5068 Delta Electronics DIAScreen Out-of-bounds Write

Delta Electronics DIAScreen may write past the end of an allocated buffer while parsing a specially crafted input file. This could allow an attacker to execute code in the context of the current process...

7.8CVSS7.8AI score0.00232EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/09/21 10:01 p.m.•13 views

CVE-2023-5068 Delta Electronics DIAScreen Out-of-bounds Write

Delta Electronics DIAScreen may write past the end of an allocated buffer while parsing a specially crafted input file. This could allow an attacker to execute code in the context of the current process...

7.8CVSS7AI score0.00232EPSS
SaveExploits0References2
CVE
CVE
•added 2023/09/21 10:01 p.m.•81 views

CVE-2023-5068

CVE-2023-5068 affects Delta Electronics DIAScreen. The issue is an out-of-bounds write when parsing a specially crafted input file, leading to possible code execution in the current process. Affected products are DIAScreen versions prior to 1.3.2; Delta released a fix in v1.3.2. Public details ac...

7.8CVSS7.6AI score0.00232EPSS
SaveExploits0References2Affected Software1
ICS
ICS
•added 2023/09/21 6:00 a.m.•47 views

Delta Electronics DIAScreen

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Low attack complexity Vendor : Delta Electronics Equipment : DIAScreen Vulnerability : Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of this vulnerability may allow remote code execution. 3. TECHNICAL DETAILS 3.1 AFFECTED...

7.8CVSS7.9AI score0.00232EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/21 12:00 a.m.•5 views

CVE-2023-5068: Out-of-bounds Write

Delta Electronics DIAScreen may write past the end of an allocated buffer while parsing a specially crafted input file. This could allow an attacker to execute code in the context of the current process...

7.8CVSS7.5AI score0.00232EPSS
SaveExploits0References2
OSV
OSV
•added 2023/09/07 6:15 p.m.•18 views

CVE-2023-4685

Delta Electronics' CNCSoft-B version 1.0.0.4 and DOPSoft versions 4.0.0.82 and prior are vulnerable to stack-based buffer overflow, which could allow an attacker to execute arbitrary code...

7.8CVSS6.3AI score0.0023EPSS
SaveExploits0References1
NVD
NVD
•added 2023/09/07 6:15 p.m.•43 views

CVE-2023-4685

Delta Electronics' CNCSoft-B version 1.0.0.4 and DOPSoft versions 4.0.0.82 and prior are vulnerable to stack-based buffer overflow, which could allow an attacker to execute arbitrary code...

7.8CVSS8AI score0.0023EPSS
SaveExploits0References1
Rows per page
Query Builder