CVE-2021-38406

CVE-2021-38406 affects Delta Electronics DOPSoft 2 (versions ≤ 2.00.07). It is caused by improper validation of user-supplied data when parsing specific project files, leading to multiple out-of-bounds write instances and potential code execution in the attacker’s context. The issue is documented...

CVE-2024-1595

Delta Electronics CNCSoft-B DOPSoft prior to v4.0.0.82 is affected by an uncontrolled search path element vulnerability due to insecure DLL loading, enabling DLL hijacking and potential code execution in the context of the affected process. ZDI documents remote code execution with user interactio...

CVE-2020-27275

CVE-2020-27275 affects Delta Electronics DOPSoft (version 4.0.8.21 and earlier). Connected advisories describe a vulnerability in the XLS (and related project file formats) parsing where the parser performs an out-of-bounds/write, caused by improper validation of input data. This flaw can enable ...

CVE-2023-0123

CVE-2023-0123 applies to Delta Electronics DOPSoft versions ≤ 4.00.16.22. The issue is a stack-based buffer overflow in the DPA file parsing code caused by improper handling of user-supplied data length, which can allow remote code execution when a malformed DPA file is opened/processed. Exploita...

CVE-2021-27455

CVE-2021-27455 affects Delta Electronics DOPSoft, versions 4.0.10.17 and earlier. The vulnerability is an out-of-bounds read when processing project files, which can disclose information. Public exploit activity is not reported; vendor advisories note that exploitation is not remote and provide g...

CVE-2021-38402

Delta Electronics DOPSoft 2 (version ≤ 2.00.07) is affected by CVE-2021-38402 due to improper validation of user-supplied data when parsing certain project files, causing a stack-based buffer overflow in font string handling. This can allow arbitrary code execution in the current process. Public ...

CVE-2022-2966

CVE-2022-2966 is a Delta Electronics DOPSoft vulnerability: two out-of-bounds read conditions occur when processing specific project files due to improper input sanitization. Affected: DOPSoft all versions. Impact per sources: potential unauthorized information disclosure (CVSSv3 base 3.3, note l...

CVE-2021-38404

CVE-2021-38404 affects Delta Electronics DOPSoft 2 (version 2.00.07 and prior). The vulnerability is a heap-based buffer overflow that arises from improper validation of user-supplied data when parsing specific project files, allowing code execution in the context of the current process. Related ...

CVE-2020-14482

Delta Industrial Automation DOPSoft is affected by CVE-2020-14482 (heap-based buffer overflow) in versions up to 4.00.08.15. The vulnerability can allow remote code execution, information disclosure/modification, or application crash when processing specially crafted project files. The ICS adviso...

CVE-2021-33019

CVE-2021-33019 describes a stack-based buffer overflow in Delta Electronics DOPSoft (versions 4.00.11 and earlier) triggered by processing a specially crafted project file, potentially allowing arbitrary code execution. Affected product: DOPSoft, an HMI programming software. Root cause: inadequat...

CVE-2021-27412

Delta Electronics DOPSoft is affected by CVE-2021-27412: an out-of-bounds read in versions up to 4.0.10.17 may allow arbitrary code execution when processing project files. 4.0.16 or later is recommended as a fix per the ICS advisory, with mitigation guidance and non-remote exploitability noted b...

CVE-2023-0124

Delta Electronics DOPSoft up to version 4.00.16.22 contains CVE-2023-0124: an out-of-bounds write in DPA file parsing that could allow remote code execution when a malformed file is provided. Affected product: DOPSoft (HMI software); affected versions are 4.00.16.22 and prior. Public references d...

CVE-2023-43818

CVE-2023-43818 describes a buffer overflow in Delta Electronics’ Delta Industrial Automation DOPSoft, specifically in handling DPS files. An attacker can achieve remote code execution by enticing a user to open a specially crafted DPS file; exploitation does not require authentication and can occ...

CVE-2020-27277

Delta Electronics DOPSoft is affected by CVE-2020-27277 (null pointer dereference) in how it processes project files, potentially enabling arbitrary code execution. The vulnerability affects DOPSoft versions up to 4.0.8.21; the ZDI advisory frames it as a remote code execution flaw in XLS file pa...

CVE-2023-43821

Delta Electronics DOPSoft (Delta Industrial Automation) is affected by a stack-based buffer overflow in the wLogTitlesActionLen field when parsing a DPS file. The vulnerability can be exploited remotely by enticing a user to open a specially crafted DPS file, leading to remote code execution. Mul...

CVE-2023-4685

CVE-2023-4685 affects Delta Electronics CNCSoft-B and DOPSoft: stack-based buffer overflow in the parsing of DPA files, impacting CNCSoft-B 1.0.0.4 and DOPSoft prior to 4.0.0.82. Evidence from ZDI describes remote code execution with user interaction (via malicious page/file), while ICS-related s...

CVE-2023-5944

Delta Electronics DOPSoft is affected by a stack-based buffer overflow in DPA file parsing, enabling arbitrary code execution. The vulnerability can be triggered remotely with user interaction (e.g., visiting a malicious page or opening a crafted file); the issue affects DOPSoft across versions. ...

CVE-2023-43819

CVE-2023-43819 affects Delta Electronics Delta Industrial Automation DOPSoft. The vulnerability is a stack-based buffer overflow in the DPS file parsing of the InitialMacroLen field, allowing remote code execution when a user opens a specially crafted DPS file. Exploitation details across sources...

CVE-2023-43816

CVE-2023-43816 affects Delta Electronics DOPSoft (Delta Industrial Automation) Version 2, where a buffer overflow occurs while parsing the wKPFStringLen field in a DPS file. The vulnerability could allow code execution if a user opens a specially crafted DPS file. The issue is corroborated across...

CVE-2023-43815

CVE-2023-43815 affects Delta Electronics DOPSoft (Delta Industrial Automation) v2. The vulnerability is a buffer overflow while parsing the wScreenDESCTextLen field in a DPS file, enabling code execution when a user opens a crafted file. Multiple sources corroborate the impact as remote code exec...

CVE-2023-43822

CVE-2023-43822 affects Delta Electronics Delta Industrial Automation DOPSoft. The vulnerability is a stack-based buffer overflow in parsing the wLogTitlesTimeLen field of a DPS file, allowing a remote, unauthenticated attacker to achieve remote code execution when a user opens a crafted DPS file....

CVE-2023-43823

CVE-2023-43823 describes a stack-based buffer overflow in Delta Electronics Delta Industrial Automation DOPSoft, triggered while parsing the wTTitleLen field of a DPS file. The vulnerability allows a remote, unauthenticated attacker to achieve remote code execution by enticing a user to open a sp...

CVE-2023-43817

Delta Electronics DOPSoft (Delta Industrial Automation), v2, is affected by a buffer overflow in parsing the wMailContentLen field of a DPS file, enabling remote code execution when a user opens a specially crafted DPS file. Several connected sources confirm the issue and advise updating to a pat...

CVE-2023-43824

CVE-2023-43824 affects Delta Electronics Delta Industrial Automation DOPSoft. The vulnerability is a stack-based buffer overflow in the DPS file parser, specifically when processing the wTitleTextLen field. The underlying issue is a memory handling flaw in parsing this field, which can be trigger...

CVE-2023-43820

CVE-2023-43820 : Delta Electronics Delta Industrial Automation DOPSoft contains a stack-based buffer overflow in the DPS file parsing of the field wLogTitlesPrevValueLen. A remote, unauthenticated attacker could trigger this by enticing a user to open a specially crafted DPS file, leading to remo...