Priority LOW 36
Delta Electronics CNCSoft-B DOPSoft prior to v4.0.0.82 insecurely loads libraries, which may allow an attacker to use DLL hijacking and take over the system where the software is installed.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0039 · Published 2024-02-29 · Fixed in v4.0.0.82 CWE-427
Priority MEDIUM 42
A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wTitleTextLen field of a DPS file.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00986 · Published 2024-01-18 · No fix listed CWE-119
Priority MEDIUM 42
A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wTTitleLen field of a DPS file.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00986 · Published 2024-01-18 · No fix listed CWE-119
Priority LOW 39
A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesTimeLen field of a DPS file.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00764 · Published 2024-01-18 · No fix listed CWE-119
Priority MEDIUM 42
A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesActionLen field of a DPS file.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00986 · Published 2024-01-18 · No fix listed CWE-119
Priority MEDIUM 42
A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesPrevValueLen field of a DPS file.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00986 · Published 2024-01-18 · No fix listed CWE-119
Priority MEDIUM 42
A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the InitialMacroLen field of a DPS file.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00986 · Published 2024-01-18 · No fix listed CWE-119
Priority MEDIUM 48
A buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00986 · Published 2024-01-18 · No fix listed CWE-119
Priority LOW 37
A buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft version 2 when parsing the wMailContentLen field of a DPS file.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00487 · Published 2024-01-18 · No fix listed CWE-119
Priority LOW 34
A buffer overflow vulnerability exists in Delta Electronics Delta Industrial Automation DOPSoft version 2 when parsing the wKPFStringLen field of a DPS file.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00411 · Published 2024-01-18 · No fix listed CWE-119
Priority LOW 35
A buffer overflow vulnerability exists in Delta Electronics Delta Industrial Automation DOPSoft version 2 when parsing the wScreenDESCTextLen field of a DPS file.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00548 · Published 2024-01-18 · No fix listed CWE-119
Priority LOW 34
Delta Electronics DOPSoft is vulnerable to a stack-based buffer overflow, which may allow for arbitrary code execution if an attacker can lead a legitimate user to execute a specially crafted file.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00365 · Published 2023-12-04 · No fix listed CWE-121
Priority LOW 36
Delta Electronics' CNCSoft-B version 1.0.0.4 and DOPSoft versions 4.0.0.82 and prior are vulnerable to stack-based buffer overflow, which could allow an attacker to execute arbitrary code.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0023 · Published 2023-09-07 · Fixed in v4.0.0.82 CWE-121
Priority LOW 36
Delta Electronics DOPSoft versions 4.00.16.22 and prior are vulnerable to an out-of-bounds write, which could allow an attacker to remotely execute arbitrary code when a malformed file is introduced to the software.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00241 · Published 2023-02-02 · No fix listed CWE-787
Priority LOW 36
Delta Electronics DOPSoft versions 4.00.16.22 and prior are vulnerable to a stack-based buffer overflow, which could allow an attacker to remotely execute arbitrary code when a malformed file is introduced to the softwar…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00245 · Published 2023-02-02 · No fix listed CWE-121
Priority LOW 33
Out-of-bounds Read vulnerability in Delta Electronics DOPSoft.This issue affects DOPSoft: All Versions.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00379 · Published 2022-12-16 · No fix listed CWE-125
Priority LOW 38
Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01036 · Published 2021-09-17 · No fix listed CWE-122
Priority MEDIUM 46
Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0712 · Published 2021-09-17 · No fix listed CWE-121
Priority CRITICAL 93KEV
Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.76428 · Published 2021-09-17 · No fix listed CWE-787
Priority LOW 39
A stack-based buffer overflow vulnerability in Delta Electronics DOPSoft Version 4.00.11 and prior may be exploited by processing a specially crafted project file, which may allow an attacker to execute arbitrary code.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02505 · Published 2021-08-30 · No fix listed CWE-121
Priority LOW 36
Delta Electronics DOPSoft Versions 4.0.10.17 and prior are vulnerable to an out-of-bounds read, which may allow an attacker to execute arbitrary code.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0097 · Published 2021-07-02 · No fix listed CWE-125
Priority LOW 26
Delta Electronics DOPSoft Versions 4.0.10.17 and prior are vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to disclose information.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00736 · Published 2021-07-02 · No fix listed CWE-125
Priority MEDIUM 40
Delta Electronics DOPSoft Version 4.0.8.21 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0339 · Published 2021-01-11 · No fix listed CWE-787
Priority LOW 38
Delta Electronics DOPSoft Version 4.0.8.21 and prior has a null pointer dereference issue while processing project files, which may allow an attacker to execute arbitrary code.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0228 · Published 2021-01-11 · No fix listed CWE-822
Priority LOW 39
Delta Industrial Automation DOPSoft, Version 4.00.08.15 and prior.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02591 · Published 2020-06-30 · No fix listed CWE-122