CVE-2022-2759

Delta Electronics Delta Robot Automation Studio DRAS versions prior to 1.13.20 are affected by improper restrictions where the software processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to emb...

CVE-2022-2759

Delta Electronics Delta Robot Automation Studio DRAS versions prior to 1.13.20 are affected by improper restrictions where the software processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to emb...

CVE-2022-2759

Delta Electronics DRAS (Delta Robot Automation Studio) prior to version 1.13.20 is affected by improper restriction of XML external entity references (CWE-611). The vulnerability stems from processing XML documents whose entities can resolve to URIs outside the intended scope, causing the product...

CVE-2022-1404 Delta Electronics CNCSoft Out-of-bounds Read

Delta Electronics CNCSoft All versions prior to 1.01.32 does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds read condition...

CVE-2022-1405 Delta Electronics CNCSoft Stack-based Buffer Overflow

CNCSoft: All versions prior to 1.01.32 does not properly sanitize input while processing a specific project file, allowing a possible stack-based buffer overflow condition...

CVE-2022-1404

Delta Electronics CNCSoft (all versions prior to 1.01.32) is affected by CVE-2022-1404 due to improper input sanitization when processing a specific project file, which can lead to an out-of-bounds read condition. The issue is documented across multiple sources (NVD entry for CVE-2022-1404, ICS a...

CVE-2022-1404 Delta Electronics CNCSoft Out-of-bounds Read

Delta Electronics CNCSoft All versions prior to 1.01.32 does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds read condition...

CVE-2022-1405 Delta Electronics CNCSoft Stack-based Buffer Overflow

CNCSoft: All versions prior to 1.01.32 does not properly sanitize input while processing a specific project file, allowing a possible stack-based buffer overflow condition...

PT-2022-18509 · Delta Electronics · Delta Robot Automation Studio

Name of the Vulnerable Software and Affected Versions: Delta Electronics Delta Robot Automation Studio DRAS versions prior to 1.13.20 Description: The issue arises from improper restrictions in processing XML documents, allowing XML entities with URIs to resolve to documents outside the intended...

CISA releases two Industrial Control Systems Advisories

CISA has released two Industrial Control Systems ICS advisories on September 01, 2022. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisories for...

CISA Adds 10 New Known Actively Exploited Vulnerabilities to its Catalog

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Friday added 10 new actively exploited vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, including a high-severity security flaw affecting industrial automation software from Delta Electronics. The issue, tracked ...

Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability

Delta Electronics DOPSoft 2 lacks proper validation of user-supplied data when parsing specific project files improper input validation resulting in an out-of-bounds write that allows for code execution...

VulnCheck KEV: CVE-2021-38406

Delta Electronics DOPSoft 2 lacks proper validation of user-supplied data when parsing specific project files improper input validation resulting in an out-of-bounds write that allows for code execution...

Delta Industrial Automation DIALink Hardcoded Cryptographic Key Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Delta Industrial Automation DIALink. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authorization of requests to the server. The issue results from...

The vulnerability of the integration IoT/SCADA platform Delta Industrial Automation DIALink, which stems from the use of a rigidly encrypted cryptographic key, allows attackers to enhance their privileges.

The vulnerability of the Delta Industrial Automation DIALink IoT/SCADA platform relates to the use of a strictly encrypted cryptographic key. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...

Delta Industrial Automation DIALink

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Delta Electronics Equipment: Delta Industrial Automation DIALink Vulnerability: Use of Hard-coded Cryptographic Key 2. RISK EVALUATION Successful exploitation of this vulnerability could result in the...

Delta Electronics Industrial Automation DIALink 信任管理问题漏洞

Delta Electronics Industrial Automation DIALink is an industrial automation IoT device from Delta Electronics Taiwan, China. The Delta Electronics Industrial Automation DIALink suffers from a security vulnerability that stems from the susceptibility of the affected product to the use of hard-code...

Delta Industrial Automation DRAS

1. EXECUTIVE SUMMARY CVSS v3 5.5 ATTENTION: Low attack complexity Vendor: Delta Electronics Equipment: Delta Robot Automation Studio DRAS Vulnerability: Improper Restriction of XML External Entity Reference. 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker...

Delta Electronics Delta Robot Automation Studio 代码问题漏洞

Delta Electronics Delta Robot Automation Studio DRAS is industrial robot control software from Delta Electronics, a Taiwan, China-based company. A code issue vulnerability exists in Delta Electronics Delta Robot Automation Studio DRAS, which arises from the possibility that XML documents processe...

deltahome.com.au Cross Site Scripting vulnerability OBB-2830781

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...