Delta Electronics Dopsoft 2 vulnerabilities
3 known vulnerabilities affecting delta_electronics/dopsoft_2.
Total CVEs
3
CISA KEV
1
actively exploited
Public exploits
0
Exploited in wild
1
Severity breakdown
HIGH3
Vulnerabilities
Page 1 of 1
CVE-2021-38406P1HIGHCVSS 7.8KEV≥ unspecified, ≤ 2.00.072021-09-17
CVE-2021-38406 [HIGH] CWE-787 CVE-2021-38406: Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data
Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could result in multiple out-of-bounds write instances. An attacker could leverage this vulnerability to execute code in the context of the current process.
nvd
CVE-2021-38402P3HIGHCVSS 7.8≥ unspecified, ≤ 2.00.072021-09-17
CVE-2021-38402 [HIGH] CWE-121 CVE-2021-38402: Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data
Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could lead to a stack-based buffer overflow while trying to copy to a buffer during font string handling. An attacker could leverage this vulnerability to execute code in the context of the current process.
nvd
CVE-2021-38404P3HIGHCVSS 7.8≥ unspecified, ≤ 2.00.072021-09-17
CVE-2021-38404 [HIGH] CWE-122 CVE-2021-38404: Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data
Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could result in a heap-based buffer overflow. An attacker could leverage this vulnerability to execute code in the context of the current process.
nvd