Deltaww vulnerabilities

310 vulnerabilities

Known vulnerabilities in Deltaww products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 49 products.

Products

49
7CVE-2026-105228deltawwispsoft
EPSS score
0.31%
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft.7CVE-2026-105227deltawwispsoft
EPSS score
0.31%
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft.7.8CVE-2018-14800delta_electronicsispsoft+1
EPSS score
1.63%
Delta Electronics ISPSoft version 3.0.5 and prior allow an attacker, by opening a crafted file, to cause the application to read past the boundary allocated to a stack object, which could allow execution of code under the context of the application.6.5CVE-2018-14824delta electronicsdelta industrial automation pmsoft+1
EPSS score
2.00%
Delta Electronics Delta Industrial Automation PMSoft v2.11 or prior has an out-of-bounds read vulnerability that can be executed when processing project files, which may allow an attacker to read confidential information.7.8CVE-2018-17927delta electronicsdelta industrial automation tpeditor+1
EPSS score
2.11%
In Delta Industrial Automation TPEditor, TPEditor Versions 1.90 and prior, multiple out-of-bounds write vulnerabilities may be exploited by processing specially crafted project files lacking user input validation, which may cause the system to write outside the intended buffer area and may allow remote code execution.7.8CVE-2018-17929delta electronicsdelta industrial automation tpeditor+1
EPSS score
1.75%
In Delta Industrial Automation TPEditor, TPEditor Versions 1.90 and prior, multiple stack-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files lacking user input validation before copying data from project files onto the stack and may allow an attacker to remotely execute arbitrary code.8.8CVE-2018-7494deltawwwplsoft+1
EPSS score
2.73%
WPLSoft in Delta Electronics versions 2.45.0 and prior utilizes a fixed length stack buffer where a value larger than the buffer can be read from a file into the buffer, causing the buffer to be overwritten, which may allow remote code execution or cause the application to crash.8.8CVE-2018-7507deltawwwplsoft+1
EPSS score
2.73%
WPLSoft in Delta Electronics versions 2.45.0 and prior utilizes a fixed length heap buffer where a value larger than the buffer can be read from a file into the buffer, causing the buffer to be overwritten, which may allow remote code execution or cause the application to crash.8.8CVE-2018-7509deltawwwplsoft+1
EPSS score
2.58%
WPLSoft in Delta Electronics versions 2.45.0 and prior writes data from a file outside the bounds of the intended buffer space, which could cause memory corruption or may allow remote code execution.7.8CVE-2018-5476deltawwdelta_industrial_automation_dopsoft
EPSS score
1.70%
A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial Automation DOPSoft, Version 4.00.01 or prior. Stack-based buffer overflow vulnerabilities caused by processing specially crafted .dop or .dpb files may allow an attacker to remotely execute arbitrary code.9.8CVE-2018-10623delta electronicsdelta industrial automation dopsoft+1
EPSS score
3.53%
Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior performs read operations on a memory buffer where the position can be determined by a value read from a .dpa file. This may cause improper restriction of operations within the bounds of the memory buffer, allow remote code execution, alter the intended control flow, allow reading of sensitive information, or cause the application to crash.9.3CVE-2018-10636deltawwcncsoft+2
EPSS score
9.42%
CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has multiple stack-based buffer overflow vulnerabilities that could cause the software to crash due to lacking user input validation before copying data from project files onto the stack. Which may allow an attacker to gain remote code execution with administrator privileges if exploited.9.8CVE-2018-10617delta electronicsdelta industrial automation dopsoft+1
EPSS score
3.53%
Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior utilizes a fixed-length heap buffer where a value larger than the buffer can be read from a .dpa file into the buffer, causing the buffer to be overwritten. This may allow remote code execution or cause the application to crash.9.8CVE-2018-10621delta electronicsdelta industrial automation dopsoft+1
EPSS score
3.53%
Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior utilizes a fixed-length stack buffer where a value larger than the buffer can be read from a .dpa file into the buffer, causing the buffer to be overwritten. This may allow remote code execution or cause the application to crash.8.1CVE-2018-10598deltawwcncsoft+2
EPSS score
3.48%
CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has two out-of-bounds read vulnerabilities could cause the software to crash due to lacking user input validation for processing project files. Which may allow an attacker to gain remote code execution with administrator privileges if exploited.9.8CVE-2018-10594deltawwcommgr+1
EPSS score
68.62%
Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPSimulator EH2, EH3, ES2, SE, SS2 and AHSIM_5x0, AHSIM_5x1) utilize a fixed-length stack buffer where an unverified length value can be read from the network packets via a specific network port, causing the buffer to be overwritten. This may allow remote code execution, cause the application to crash, or result in a denial-of-service condition in the application server.9.8CVE-2018-8871delta electronicsautomation tpeditor+1
EPSS score
3.82%
In Delta Electronics Automation TPEditor version 1.89 or prior, parsing a malformed program file may cause heap-based buffer overflow vulnerability, which may allow remote code execution.7.8CVE-2018-8839delta_electronicspmsoft+1
EPSS score
0.46%
Delta PMSoft versions 2.10 and prior have multiple stack-based buffer overflow vulnerabilities where a .ppm file can introduce a value larger than is readable by PMSoft's fixed-length stack buffer. This can cause the buffer to be overwritten, which may allow arbitrary code execution or cause the application to crash. CVSS v3 base score: 7.1; CVSS vector string: AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H. Delta Electronics recommends affected users update to at least PMSoft v2.11, which was made available as of March 22, 2018, or the latest available version.6.5CVE-2021-31558delta electronicsdiaenergie+1
EPSS score
10.56%
DIAEnergie Version 1.7.5 and prior is vulnerable to stored cross-site scripting when an unauthenticated user injects arbitrary code into the parameter “descr” of the script “DIAE_hierarchyHandler.ashx”.7.8CVE-2021-43982delta electronicscncsoft+1
EPSS score
9.59%
Delta Electronics CNCSoft Versions 1.01.30 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code.