PT-2020-14030

CVE-2020-14482

·

Published

2020-06-30

·

Updated

2020-07-10

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Delta Industrial Automation DOPSoft versions 4.00.08.15 and prior
Description The issue allows remote code execution, disclosure or modification of information, or causes the application to crash when a specially crafted project file is opened, potentially overflowing the heap.
Recommendations For versions 4.00.08.15 and prior, avoid opening specially crafted project files until a patch is available. As a temporary workaround, consider restricting access to project files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾