PT-2021-2784
CVE-2021-27480
·
Published
2021-04-21
·
Updated
2021-05-07
Description by
CVSS 2.0
10
CriticalMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Delta Industrial Automation COMMGR versions 1.12 and prior
Description
The issue is related to a stack-based buffer overflow in the Delta Industrial Automation COMMGR software. This could allow a remote attacker to impact the confidentiality, integrity, and availability of protected information. The exploitation of this issue may enable an attacker to execute remote code.
Recommendations
For versions 1.12 and prior, update to a version that fixes the stack-based buffer overflow issue to prevent potential remote code execution.
As a temporary workaround, consider restricting access to the COMMGR software until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾