CVE-2018-10623
Last modified
CVE-2018-10623 is a vulnerability of currently unknown severity. Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior performs read operations on a memory buffer where the position can be determined by a value read from a .dpa file. This may cause improper restriction of operations within the bounds of the memory buffer, allow remote code execution, alter the intended control flow, allow reading of sensitive information, or cause the application to crash.. EPSS estimates a 3.58% chance of exploitation in the next 30 days.
Description
Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior performs read operations on a memory buffer where the position can be determined by a value read from a .dpa file. This may cause improper restriction of operations within the bounds of the memory buffer, allow remote code execution, alter the intended control flow, allow reading of sensitive information, or cause the application to crash.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Deltaww | Delta Industrial Automation Dopsoft | <= 4.00.04 |
References
- http://www.securityfocus.com/bid/104375Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-151-01Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/104375Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-151-01Third Party Advisory, US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-10623?
How severe is CVE-2018-10623?
How do I fix CVE-2018-10623?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-10618Davolink DVW-3200N all version prior to Version 1.00.06. The…
- CVE-2018-10619An unquoted search path or element in RSLinx Classic Version…
- CVE-2018-1062A vulnerability was discovered in oVirt 4.1.x before 4.1.9, …5.3
- CVE-2018-10620AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Mach…9.8
- CVE-2018-10621Delta Electronics Delta Industrial Automation DOPSoft versio…
- CVE-2018-10622Medtronic MyCareLink Patient Monitor uses per-product creden…5.2
- CVE-2018-10624In Johnson Controls Metasys System Versions 8.0 and prior an…
- CVE-2018-10626Medtronic MyCareLink Patient Monitor’s update service does n…4.4
- CVE-2018-10627Echelon SmartServer 1 all versions, SmartServer 2 all versio…9.8
- CVE-2018-10628AVEVA InTouch 2014 R2 SP1 and prior, InTouch 2017, InTouch 2…
- CVE-2018-1063Context relabeling of filesystems is vulnerable to symbolic …
- CVE-2018-10630For Crestron TSW-X60 version prior to 2.001.0037.001 and MC3…
Are you affected by CVE-2018-10623?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST