High severity · published Mar 15, 2018
CVE-2017-16745
A Type Confusion issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior
7.8
CVSS
1.1%
EPSS
No
On KEV
Description
A Type Confusion issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. An access of resource using incompatible type ('type confusion') vulnerability may allow an attacker to execute remote code when processing specially crafted .dpb files.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DI
Delta Industrial Automation Screen Editor · Deltaww
through 2.00.23.00 · source: NVD
Affected product
DI
Delta Industrial Automation Screen Editor
Deltaww
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-16745
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-16745
Third Party Advisory
http://www.securityfocus.com/bid/102426
Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-18-004-01
More from Delta Industrial Automation Screen Editor
7.8
CVE-2017-16751
A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior
7.8
CVE-2017-16749
A Use-after-Free issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior
7.8
CVE-2017-16747
An Out-of-bounds Write issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior