You are here

Delta Electronics PMSoft (ICSA-18-116-01)

Delta Electronics PMSoft (ICSA-18-116-01)

Created: Thursday, April 26, 2018 - 15:53
Categories:
Cybersecurity

The NCCIC has released an advisory on vulnerabilities in Delta Electronics PMSoft. All versions prior to 2.10 are affected. Successful exploitation of these vulnerabilities could cause the application to crash; stack-based buffer overflow conditions may allow arbitrary code execution. Delta Electronics recommends affected users update to at least PMSoft v2.11, which was made available as of March 22, 2018, or the latest available version. The NCCIC also recommends a series of defensive measures to minimize the risk of exploitation of the vulnerabilities. NCCIC/ICS-CERT.