CVE ID | CVE-2018-7507 |
CVSS SCORE | 5.1, AV:N/AC:H/Au:N/C:P/I:P/A:P |
AFFECTED VENDORS |
Delta Industrial Automation |
AFFECTED PRODUCTS |
WPLSoft |
TREND MICRO CUSTOMER PROTECTION | Trend Micro TippingPoint IPS customers are protected against this vulnerability by Digital Vaccine protection filter ID ['25369']. For further product information on the TippingPoint IPS: http://www.tippingpoint.com |
VULNERABILITY DETAILS |
The specific flaw exists within the parsing of dvp files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute arbitrary code under the context of the current process. |
ADDITIONAL DETAILS |
Delta Industrial Automation has issued an update to correct this vulnerability. More details can be found at:
https://ics-cert.us-cert.gov/advisories/ICSA-18-058-02
02/01/17 - ZDI disclosed reports to ICS-CERT -- Mitigation: |
DISCLOSURE TIMELINE |
|
CREDIT | axt |