Vulnerabilities CVE-2021-38406

CVE-2021-38406

Medium

Open

KEV

TLP:CLEAR

Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability

NVD CVE.org

Critical Infrastructure

AI Analysis

No AI analysis yet.

Description

Delta Electronics — DOPSoft 2 — Delta Electronics DOPSoft 2 lacks proper validation of user-supplied data when parsing specific project files (improper input validation) resulting in an out-of-bounds write that allows for code execution.

Details

EPSS Score ⓘ: 77.89%

99.5th percentile
Confidence: 100%
CISA KEV
Date Added: Aug 25, 2022
Patch Due: Sep 15, 2022
Required Action: The impacted product is end-of-life and should be disconnected if still in use.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.