Vulnerability CVE-2017-16745
Published: 2018-03-15   Modified: 2018-03-16

Description:
A Type Confusion issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. An access of resource using incompatible type ('type confusion') vulnerability may allow an attacker to execute remote code when processing specially crafted .dpb files.

Type:

CWE-704

 (Incorrect Type Conversion or Cast)

CVSS2 => (AV:N/AC:M/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
6.8/10
6.4/10
8.6/10
Exploit range
Attack complexity
Authentication
Remote
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
Deltaww -> Delta industrial automation screen editor 

 References:
http://www.securityfocus.com/bid/102426
https://ics-cert.us-cert.gov/advisories/ICSA-18-004-01
Copyright 2024, cxsecurity.com

 

Back to Top