PT-2021-11361

CVE-2020-27277

·

Published

2021-01-11

·

Updated

2021-03-09

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Delta Electronics DOPSoft versions 4.0.8.21 and prior
Description: The issue is related to a null pointer dereference while processing project files, which may allow an attacker to execute arbitrary code.
Recommendations: For versions 4.0.8.21 and prior, update to a version that fixes the null pointer dereference issue to prevent potential arbitrary code execution.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-822: Untrusted Pointer Dereference
CWE-476: NULL Pointer Dereference
Related identifiers
CVE-2020-27277
ZDI-21-033
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com