CVE-2018-7494

WPLSoft in Delta Electronics versions 2.45.0 and prior utilizes a fixed length stack buffer where a value larger than the buffer can be read from a file into the buffer, causing the buffer to be overwritten, which may allow remote code execution or cause the application to crash.

Score

CVSS 3.0 8.8 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-05-04

Last modified

2024-09-16

Weaknesses

CWE-119, CWE-121

Affected products

• Wplsoft (Deltaww)
• Delta Electronics Wplsoft (Ics-cert)

References

• http://www.securityfocus.com/bid/103179
• https://ics-cert.us-cert.gov/advisories/ICSA-18-058-02