CVE-2018-17929

In Delta Industrial Automation TPEditor, TPEditor Versions 1.90 and prior, multiple stack-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files lacking user input validation before copying data from project files onto the stack and may allow an attacker to remotely execute arbitrary code.

Score

CVSS 3.1 7.8 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-10-11

Last modified

2024-09-17

Weaknesses

CWE-121, CWE-787

Affected products

• Delta Industrial Automation Tpeditor (Delta Electronics)
• Tpeditor (Deltaww)

References

• http://www.securityfocus.com/bid/105682
• https://ics-cert.us-cert.gov/advisories/ICSA-18-284-03