Delta Electronics Delta Industrial Automation TPEditor (UPDATE A) (ICSA-18-137-04) – Product Used in the Energy Sector
June 7, 2018
The NCCIC has updated this advisory with additional details on mitigating measures. NCCIC/ICS-CERT.
May 17, 2018
delta electronics
Delta Electronics PMSoft (ICSA-18-116-01)
The NCCIC has released an advisory on vulnerabilities in Delta Electronics PMSoft. All versions prior to 2.10 are affected. Successful exploitation of these vulnerabilities could cause the application to crash; stack-based buffer overflow conditions may allow arbitrary code execution. Delta Electronics recommends affected users update to at least PMSoft v2.11, which was made available as of March 22, 2018, or the latest available version. The NCCIC also recommends a series of defensive measures to minimize the risk of exploitation of the vulnerabilities.
Delta Electronics Delta Industrial Automation DOPSoft (ICSA-18-060-03)
ICS-CERT has released an advisory on a Delta Electronics Delta Industrial Automation DOPSoft vulnerability. Delta Industrial Automation DOPSoft version 4.00.01 and prior are affected. Successful exploitation of this vulnerability could cause the device the attacker is accessing to crash; a buffer overflow condition may allow remote code execution. Delta Electronics recommends affected users update to the latest version of DOPSoft Version 4.00.04. ICS-CERT also recommends a series of defensive measures to minimize the risk of exploitation of this vulnerability.
Delta Electronics Delta Industrial Automation Screen Editor (ICSA-18-004-01)
ICS-CERT has released an advisory on a Delta Electronics Delta Industrial Automation Screen Editor vulnerability. Versions 2.00.23.00 and prior are affected. Successful exploitation of these vulnerabilities may allow an attacker to remotely execute arbitrary code. Delta Electronics recommends affected users update to the latest version of DOPSoft Version 2. ICS-CERT also recommends a series of defensive measures to minimize the risk of exploitation of this vulnerability. ICS-CERT.
