Delta Electronics DIAScreen 安全漏洞

Delta Electronics DIAScreen is a smartphone builder from Delta Electronics, a Taiwan, China-based company. A security vulnerability exists in Delta Electronics DIAScreen version 1.2.1.23 and prior versions, which originates from a vulnerability that is easily exploited by the...

_receiveDripsResult() overcounts amtPerCycle

Lines of code Vulnerability details Impact Drips results will be accounted for wrongly and hence users will receive more drips than they should. Proof of Concept According to the whitepaper, amtDeltas stored at each cycle is the value relative to the previous cycle. The stored delta for a cycle i...

Delta Electronics DX-2100 Series 跨站脚本漏洞

The Delta Electronics DX-2100 Series is a router from Delta Electronics China. A security vulnerability exists in Delta Electronics DX-2100-L1-CN version 1.5.0.10, which is caused due to a security issue in the "net diagnosis" function in the Web Configuration Service, and can be exploited in the...

Delta Electronics DIAScreen 缓冲区错误漏洞

A buffer overflow vulnerability exists in Delta Electronics DIAScreen 1.2.1.23 and prior versions, which is caused by an improperly restricted operation in memory. The vulnerability is caused by an improperly restricted operation in memory, resulting in a buffer overflow that can be exploited to...

CVE-2023-0124 CVE-2023-0124

Delta Electronics DOPSoft versions 4.00.16.22 and prior are vulnerable to an out-of-bounds write, which could allow an attacker to remotely execute arbitrary code when a malformed file is introduced to the software...

CVE-2023-0124

Delta Electronics DOPSoft up to version 4.00.16.22 contains CVE-2023-0124: an out-of-bounds write in DPA file parsing that could allow remote code execution when a malformed file is provided. Affected product: DOPSoft (HMI software); affected versions are 4.00.16.22 and prior. Public references d...

CVE-2023-0124 CVE-2023-0124

Delta Electronics DOPSoft versions 4.00.16.22 and prior are vulnerable to an out-of-bounds write, which could allow an attacker to remotely execute arbitrary code when a malformed file is introduced to the software...

CVE-2023-0123

CVE-2023-0123 applies to Delta Electronics DOPSoft versions ≤ 4.00.16.22. The issue is a stack-based buffer overflow in the DPA file parsing code caused by improper handling of user-supplied data length, which can allow remote code execution when a malformed DPA file is opened/processed. Exploita...

CVE-2023-0123 CVE-2023-0123

Delta Electronics DOPSoft versions 4.00.16.22 and prior are vulnerable to a stack-based buffer overflow, which could allow an attacker to remotely execute arbitrary code when a malformed file is introduced to the software...

CVE-2023-0123 CVE-2023-0123

Delta Electronics DOPSoft versions 4.00.16.22 and prior are vulnerable to a stack-based buffer overflow, which could allow an attacker to remotely execute arbitrary code when a malformed file is introduced to the software...

CVE-2022-4634 CVE-2022-4634

All versions prior to Delta Electronic’s CNCSoft version 1.01.34 running ScreenEditor versions 1.01.5 and prior are vulnerable to a stack-based buffer overflow, which could allow an attacker to remotely execute arbitrary code...

CVE-2022-4634 CVE-2022-4634

All versions prior to Delta Electronic’s CNCSoft version 1.01.34 running ScreenEditor versions 1.01.5 and prior are vulnerable to a stack-based buffer overflow, which could allow an attacker to remotely execute arbitrary code...

CVE-2022-4634

CVE-2022-4634 affects Delta Electronics CNCSoft (CNCSoft prior to 1.01.34) and ScreenEditor prior to 1.01.5. The issue is a stack-based buffer overflow in DPB/file parsing, with reports of remote code execution potential; some sources indicate user interaction is required and others note no publi...

CISA Releases Six Industrial Control Systems Advisories

CISA released six Industrial Control Systems ICS advisories on February 2, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisories for...

PT-2023-1547 · Delta Electronics · Dopsoft

Name of the Vulnerable Software and Affected Versions: Delta Electronics DOPSoft versions 4.00.16.22 and prior Description: The issue is caused by a stack-based buffer overflow. This could allow an attacker to execute arbitrary code remotely when a specially crafted file is introduced to the...

PT-2023-1351 · Delta Electronics · Diascreen

Name of the Vulnerable Software and Affected Versions: Delta Electronics DIAScreen versions 1.2.1.23 and prior Description: The issue is related to a stack-based buffer overflow, which could allow an attacker to remotely execute arbitrary code. This is a result of a vulnerability in the developme...

PT-2023-1546 · Delta Electronics · Dx-2100-L1-Cn

Name of the Vulnerable Software and Affected Versions: Delta Electronics DX-2100-L1-CN affected versions not specified Description: The web configuration service of the affected device contains an authenticated command injection vulnerability. It can be used to execute system commands on the...

CVE-2023-0124: Out-of-bounds Write

Delta Electronics DOPSoft versions 4.00.16.22 and prior are vulnerable to an out-of-bounds write, which could allow an attacker to remotely execute arbitrary code when a malformed file is introduced to the software...

CVE-2023-0123: Stack-based Buffer Overflow

Delta Electronics DOPSoft versions 4.00.16.22 and prior are vulnerable to a stack-based buffer overflow, which could allow an attacker to remotely execute arbitrary code when a malformed file is introduced to the software...

PT-2023-1541 · Delta Electronics · Dopsoft

Name of the Vulnerable Software and Affected Versions: Delta Electronics DOPSoft versions 4.00.16.22 and prior Description: The issue is related to an out-of-bounds write in the DOPSoft software, which could allow an attacker to remotely execute arbitrary code when a malformed file is introduced ...