Login Request a demo
High severity · published Mar 15, 2018
CVE-2017-16747
An Out-of-bounds Write issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior
7.8
CVSS
1.1%
EPSS
No
On KEV
Description
An Out-of-bounds Write issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. Specially crafted .dpb files may cause the system to write outside the intended buffer area.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DI
Delta Industrial Automation Screen Editor · Deltaww
through 2.00.23.00 · source: NVD
Affected product
DI
Delta Industrial Automation Screen Editor
Deltaww
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-16747
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-16747
Third Party Advisory
http://www.securityfocus.com/bid/102426
Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-18-004-01
More from Delta Industrial Automation Screen Editor
7.8
CVE-2017-16751
A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior
7.8
CVE-2017-16749
A Use-after-Free issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior
7.8
CVE-2017-16745
A Type Confusion issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior