CVE-2018-8871 In Delta Electronics Automation TPEditor version 1.89 or prior, parsing a malformed program file may cause heap-based buffer overflow vulnerability, which may allow remote code execution.
CriticalCVSS 9.8
EPSS 3.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In Delta Electronics Automation TPEditor version 1.89 or prior, parsing a malformed program file may cause heap-based buffer overflow vulnerability, which may allow remote code execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| deltaww tpeditor | < 1.89 | 1.89 |
| Delta Electronics Automation TPEditor | = Version 1.89 or prior | No fix listed |
References
- 104216 third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource