CVE-2023-0123
Assigner: icscert
Published: 2023-02-02T22:57:48.508Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: DOPSoft
vendor: Delta Industrial Automation
versions: lessThanOrEqual: 4.00.16.22
status: affected
version: all versions
versionType: custom
credits: type: finder
user: 00000000-0000-4000-9000-000000000000
value: Natnael Samson (@NattiSamson), working with Trend Micro’s Zero Day Initiative
datePublic: 2023-01-31T15:45:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: <p>Delta Electronics DOPSoft versions 4.00.16.22 and prior are vulnerable to a stack-based buffer overflow, which could allow an attacker to remotely execute arbitrary code when a malformed file is introduced to the software.</p>
value: Delta Electronics DOPSoft versions 4.00.16.22 and prior are vulnerable to a stack-based buffer overflow, which could allow an attacker to remotely execute arbitrary code when a malformed file is introduced to the software.


metrics: cvssV3_1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-121
description: CWE-121
type: CWE
solutions: supportingMedia: base64: no
type: text/html
value: 

<span style="background-color: rgb(255, 255, 255);">Delta Electronics released </span><a target="_blank" rel="nofollow" href="https://deltaiastudio.b2clogin.com/deltaiastudio.onmicrosoft.com/oauth2/v2.0/authorize?p=b2c_1_diastudiosigninup&amp;client_id=9092aab8-5ccc-4a8a-a76a-59b00b7d0d52&amp;redirect_uri=https%3a%2f%2fdiastudio.deltaww.com%2f&amp;response_mode=form_post&amp;response_type=id_token&amp;scope=openid&amp;state=OpenIdConnect.AuthenticationProperties%3dtSXw0hKpEQ9vkkvdbqbshwzywJBnOgHxqapYQrEFN1e07YOvSVHV4JuCnsD_u70KLfNuS1hKhM-fxE-PWfcOiK5DvJawVerhuz5N06I2xkJWLrZ0yh9PwixawgeMnt-gu8pNLCmqRH8jRkrirPp2XMz3lu8Qd1AmJGdk9xRhIziSEbdEjF0X8r2D4klk7yno&amp;nonce=638084927799189443.NTVmNmFmNDMtYjNmMC00ZWY0LWI3ZjQtYzA0NTI0NTE5MTVmODE0MGU5ZGItNDhhMy00MDI5LTk4NWQtYzUxNjJkOGJiYmI1&amp;ui_locales=en-US&amp;x-client-SKU=ID_NET&amp;x-client-ver=1.0.40306.1554#catalog">version 1.3.0 of DIAScreen</a><span style="background-color: rgb(255, 255, 255);">&nbsp;(login required) and recommends users to use DIAScreen instead of DOPSoft. </span>

<br>
value: 
Delta Electronics released  version 1.3.0 of DIAScreen https://deltaiastudio.b2clogin.com/deltaiastudio.onmicrosoft.com/oauth2/v2.0/authorize  (login required) and recommends users to use DIAScreen instead of DOPSoft. 



source: discovery: EXTERNAL
title: CVE-2023-0123
x_generator: engine: VINCE 2.0.6
env: prod
origin: https://cveawg.mitre.org/api/cve/CVE-2023-0123