High severity · published Feb 13, 2017
CVE-2016-5805
An issue was discovered in Delta Electronics WPLSoft, Versions prior to V2.42.11, ISPSoft, Versions prior to 3.02.11, and PMSoft, Versions prior to2.10.10
7.8
CVSS
1.7%
EPSS
No
On KEV
Description
An issue was discovered in Delta Electronics WPLSoft, Versions prior to V2.42.11, ISPSoft, Versions prior to 3.02.11, and PMSoft, Versions prior to2.10.10. There are multiple instances of heap-based buffer overflows that may allow malicious files to cause the execution of arbitrary code or a denial of service.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IS
Ispsoft · Delta Electronics
All versions, or not specified · source: NVD
PM
Pmsoft · Delta Electronics
All versions, or not specified · source: NVD
WP
Wplsoft · Delta Electronics
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-5805
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-5805
Third Party Advisory
http://www.securityfocus.com/bid/94887
Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-16-348-03
More from Ispsoft
9.8
CVE-2025-4125
ISPSoft File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
9.8
CVE-2025-4124
ISPSoft File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
9.8
CVE-2025-22884
ISPSoft File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
9.8
CVE-2025-22883
ISPSoft File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
9.8
CVE-2025-22882
ISPSoft File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability