Lucene search

IcscertCVE-2018-7507

HistoryMay 04, 2018 - 7:29 p.m.

CVE-2018-7507

2018-05-0419:29:00

CWE-119

CWE-122

icscert

web.nvd.nist.gov

cve-2018-7507

nvd

information security

delta electronics

remote code execution

application crash

heap buffer overflow

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.014

Percentile

86.5%

JSON

WPLSoft in Delta Electronics versions 2.45.0 and prior utilizes a fixed length heap buffer where a value larger than the buffer can be read from a file into the buffer, causing the buffer to be overwritten, which may allow remote code execution or cause the application to crash.

Affected configurations

Nvd

Node

deltawwwplsoftRange≤2.45.0

VendorProductVersionCPE
deltawwwplsoft*cpe:2.3:a:deltaww:wplsoft:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
deltaww	wplsoft	*	cpe:2.3:a:deltaww:wplsoft::::::::

CNA Affected

[
  {
    "product": "Delta Electronics WPLSoft",
    "vendor": "ICS-CERT",
    "versions": [
      {
        "status": "affected",
        "version": "WPLSoft, Versions 2.45.0 and prior."
      }
    ]
  }
]

References

www.securityfocus.com/bid/103179

ics-cert.us-cert.gov/advisories/ICSA-18-058-02

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.014

Percentile

86.5%

JSON

Related for CVE-2018-7507