CVE-2021-32965

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAScreen versions prior to 1.1.0

Description The issue is related to type confusion errors in the software for programmable logic controllers DIAScreen. This may allow an attacker to remotely execute arbitrary code by sending specially crafted data to the application. The vulnerability is associated with errors in mixing data types.

Recommendations For versions prior to 1.1.0, update to version 1.1.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the DIAScreen software to minimize the risk of exploitation. Avoid using the software for parsing XLS files until the issue is resolved.