Delta DOPSoft <= 4.00.16.22 Multiple Vulnerabilities

The version of Delta DOPSoft installed on the remote host is prior to or equal to 4.00.16.22. It is, therefore, affected by multiple vulnerabilities as referenced in the CISA ICSA-23-031-01 advisory. - Delta Electronics DOPSoft versions 4.00.16.22 and prior are vulnerable to a stack-based buffer...

CVE-2023-0123

CVE-2023-0123 applies to Delta Electronics DOPSoft versions ≤ 4.00.16.22. The issue is a stack-based buffer overflow in the DPA file parsing code caused by improper handling of user-supplied data length, which can allow remote code execution when a malformed DPA file is opened/processed. Exploita...