Delta DOPSoft <= 2.00.07 Multiple Vulnerabilities

The version of Delta DOPSoft installed on the remote host is prior to or equal to 2.00.07. It is, therefore, affected by multiple vulnerabilities as referenced in the CISA ICSA-21-252-02 advisory. - Delta Electronic DOPSoft 2 Version 2.00.07 and prior lacks proper validation of user-supplied data...

CVE-2021-38402

Delta Electronic DOPSoft 2 Version 2.00.07 and prior lacks proper validation of user-supplied data when parsing specific project files. This could lead to a stack-based buffer overflow while trying to copy to a buffer during font string handling. An attacker could leverage this vulnerability to...

CVE-2021-38406

Delta Electronic DOPSoft 2 Version 2.00.07 and prior lacks proper validation of user-supplied data when parsing specific project files. This could result in multiple out-of-bounds write instances. An attacker could leverage this vulnerability to execute code in the context of the current process...

CVE-2021-38404

CVE-2021-38404 affects Delta Electronics DOPSoft 2 (version 2.00.07 and prior). The vulnerability is a heap-based buffer overflow that arises from improper validation of user-supplied data when parsing specific project files, allowing code execution in the context of the current process. Related ...

CVE-2021-38404 Delta Electronics DOPSoft 2 Heap-based Buffer Overflow

Delta Electronic DOPSoft 2 Version 2.00.07 and prior lacks proper validation of user-supplied data when parsing specific project files. This could result in a heap-based buffer overflow. An attacker could leverage this vulnerability to execute code in the context of the current process...

CVE-2021-38406 Delta Electronics DOPSoft 2 Out-of-Bounds Write

Delta Electronic DOPSoft 2 Version 2.00.07 and prior lacks proper validation of user-supplied data when parsing specific project files. This could result in multiple out-of-bounds write instances. An attacker could leverage this vulnerability to execute code in the context of the current process...

CVE-2021-38406

Delta Electronic DOPSoft 2 Version 2.00.07 and prior lacks proper validation of user-supplied data when parsing specific project files. This could result in multiple out-of-bounds write instances. An attacker could leverage this vulnerability to execute code in the context of the current process...