Delta Electronics TPEditor Versions 1.97 and prior. An improper input validation may be exploited by processing a specially crafted project file not validated when the data is entered by a user. Successful exploitation of this vulnerability may allow an attacker to read/modify information, execute arbitrary code, and/or crash the application.
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Link | Tags |
---|---|
https://us-cert.cisa.gov/ics/advisories/icsa-20-219-04 | third party advisory us government resource |
https://www.zerodayinitiative.com/advisories/ZDI-20-965/ | vdb entry third party advisory |