Nattisamson

A crafted DPA file could force Delta Electronics DIAScreen to overflow a stack-based buffer, which could allow an attacker to execute arbitrary code.

The issue is caused by a stack-based buffer overflow in the CNCSoft-B software, which may allow an attacker to execute arbitrary code. This can be exploited by remote attackers, potentially requiring user interaction, such as visiting a specific link. The vulnerability may allow for remote code execution on affected installations.

The issue is caused by a stack-based buffer overflow in Delta Electronics' CNCSoft-B and DOPSoft, which could allow an attacker to execute arbitrary code. This overflow occurs during the parsing of DPA files.

The issue is related to a stack-based buffer overflow, which could allow an attacker to execute arbitrary code.

The issue is related to an out-of-bounds write, which may allow an attacker to remotely execute arbitrary code. This is a result of a buffer overflow vulnerability in the DIAScreen development environment for industrial control system management.

The issue is related to a stack-based buffer overflow, which could allow an attacker to remotely execute arbitrary code. This is a result of a vulnerability in the development environment for industrial equipment control systems, specifically in the DIAScreen software.

The issue is related to a buffer overflow in memory due to improper restrictions of operations. This could allow an attacker to remotely execute arbitrary code.

The issue is an Out-of-bounds Read vulnerability in Delta Electronics DOPSoft.

The issue is related to a heap-based buffer overflow that could allow an attacker to execute arbitrary code. This occurs when processing DPA files, potentially enabling an attacker to execute arbitrary code by opening a specially crafted malicious file or webpage.

Name of the Vulnerable Software and Affected Versions: WECON LeviStudioU versions 2019-09-21 and prior Description: The issue concerns multiple stack-based buffer overflow instances while parsing project files, which may allow an attacker to execute arbitrary code. This occurs in various tags, including Alarm, XY, BaseSet, Trend, and HmiSet, where parameters such as `WordAddr`, `CurScrIdAddr`, `HMINAME`, `Style`, `bitaddr`, `ScrIdWordAddr`, `PowerEnterTime`, and `EnterTime` are vulnerable to buffer overflow attacks. Recommendations: For WECON LeviStudioU versions 2019-09-21 and prior, as a temporary workaround, consider disabling the parsing of project files until a patch is available. Restrict access to the UMP file parsing functionality to minimize the risk of exploitation. Avoid using vulnerable tags and parameters, such as `WordAddr`, `CurScrIdAddr`, `HMINAME`, `Style`, `bitaddr`, `ScrIdWordAddr`, `PowerEnterTime`, and `EnterTime`, in the affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to an out-of-bounds write in memory while processing project files, which may allow an attacker to execute arbitrary code. This can be exploited by an attacker to gain unauthorized access and control.

The issue is related to a stack-based buffer overflow that occurs while processing project files, potentially allowing an attacker to execute arbitrary code. This is a result of the software's inability to properly handle certain file types, leading to a buffer overflow in the stack. The exploitation of this issue may enable an attacker to run arbitrary code, posing a significant security risk.

The issue is a heap-based buffer overflow that may allow an attacker to remotely execute code.

The issue is related to improper validation of user-supplied data when parsing project files, which could result in an unexpected sign extension. This could allow a remote attacker to execute arbitrary code by having a user open a specially crafted malicious file.

The issue is related to an out-of-bounds read, which may allow an attacker to read unauthorized information.

The issue is related to a stack-based buffer overflow in the FATEK Automation WinProladder software. This occurs due to improper validation of user-supplied data when parsing project files. An attacker could exploit this to execute arbitrary code, potentially by tricking a user into opening a specially crafted malicious file.

The issue is related to the lack of proper validation of user-supplied data when parsing project files, which could result in a memory-corruption condition. This could allow an attacker to execute arbitrary code in the context of the current process. The vulnerability is also described as a buffer overflow condition during the syntactic analysis of project files, which could be exploited by a remote attacker using a specially crafted file.

The issue is related to a use after free vulnerability when parsing project files, which may allow arbitrary code execution if a valid user opens a malformed project file. This could potentially enable an attacker to execute arbitrary code.

The issue is related to the lack of proper validation of user-supplied data when parsing project files, which could result in a heap-corruption condition or buffer overflow. This could allow an attacker to execute code in the context of the current process by leveraging the vulnerability with a specially crafted file.

The issue is caused by a stack-based buffer overflow vulnerability due to a lack of proper validation of the length of user-supplied data. This may allow a remote attacker to execute arbitrary code.