Priority MEDIUM 44
If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetParameter can be exploited, allowing the attacker to remotely exec…
CVSS 4.0HIGH 8.4· Local · No auth · User interaction · EPSS 0.02906 · Published 2024-11-11 · Fixed in v1.5.0 CWE-121
Priority MEDIUM 40
Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to a stack-based buffer overflow, which could allow an attacker to remotely execute arbitrary code.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01999 · Published 2023-02-08 · No fix listed CWE-121
Priority LOW 39
A crafted DPA file could force Delta Electronics DIAScreen to overflow a stack-based buffer, which could allow an attacker to execute arbitrary code.
CVSS 4.0HIGH 8.5· Local · No auth · User interaction · EPSS 0.00424 · Published 2024-08-06 · Fixed in 1.4.2 CWE-121
Priority LOW 39
Delta Electronics DIAScreen versions prior to 1.1.0 are vulnerable to an out-of-bounds write condition, which may result in a system crash or allow an attacker to remotely execute arbitrary code.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01224 · Published 2022-05-24 · Fixed in v1.1.0 CWE-787
Priority LOW 39
Delta Electronics DIAScreen versions prior to 1.1.0 are vulnerable to type confusion, which may allow an attacker to remotely execute arbitrary code.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01224 · Published 2022-05-24 · Fixed in v1.1.0 CWE-843
Priority LOW 38
If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetObjectInfo can be exploited, allowing the attacker to remotely exe…
CVSS 4.0HIGH 8.4· Local · No auth · User interaction · EPSS 0.00301 · Published 2024-11-11 · Fixed in v1.5.0 CWE-121
Priority LOW 38
If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in CEtherIPTagItem can be exploited, allowing the attacker to remotely exec…
CVSS 4.0HIGH 8.4· Local · No auth · User interaction · EPSS 0.00301 · Published 2024-11-11 · Fixed in v1.5.0 CWE-121
Priority LOW 36
Delta Electronics DIAScreen may write past the end of an allocated buffer while parsing a specially crafted input file.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00232 · Published 2023-09-21 · Fixed in v1.3.2 CWE-787
Priority LOW 36
Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to a buffer overflow through improper restrictions of operations within memory, which could allow an attacker to remotely execute arbitrary code.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00296 · Published 2023-02-08 · No fix listed CWE-119
Priority LOW 36
Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to out-of-bounds write, which may allow an attacker to remotely execute arbitrary code.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00253 · Published 2023-02-08 · No fix listed CWE-787
Priority LOW 31
Delta Electronics DIAScreen lacks proper validation of the user-supplied file.
CVSS 4.0MEDIUM 6.8· Local · No auth · User interaction · EPSS 0.00186 · Published 2025-10-03 · Fixed in 1.6.1 CWE-787
Priority LOW 31
Delta Electronics DIAScreen lacks proper validation of the user-supplied file.
CVSS 4.0MEDIUM 6.8· Local · No auth · User interaction · EPSS 0.00161 · Published 2025-10-03 · Fixed in 1.6.1 CWE-787
Priority LOW 31
Delta Electronics DIAScreen lacks proper validation of the user-supplied file.
CVSS 4.0MEDIUM 6.8· Local · No auth · User interaction · EPSS 0.00161 · Published 2025-10-03 · Fixed in 1.6.1 CWE-787
Priority LOW 31
Delta Electronics DIAScreen lacks proper validation of the user-supplied file.
CVSS 4.0MEDIUM 6.8· Local · No auth · User interaction · EPSS 0.00161 · Published 2025-10-03 · Fixed in 1.6.1 CWE-787