CVE-2018-10623: delta electronics delta industrial automation dopsoft Out-of-bounds Read
Vulnerability summary
CVE-2018-10623 is a critical (CVSS 9.8) Out-of-bounds Read vulnerability in delta electronics delta industrial automation dopsoft. EPSS estimates a 3.53% chance of exploitation in the next 30 days, higher than 89.1% of scored vulnerabilities.
Timeline
- 18-06-2018PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior performs read operations on a memory buffer where the position can be determined by a value read from a .dpa file. This may cause improper restriction of operations within the bounds of the memory buffer, allow remote code execution, alter the intended control flow, allow reading of sensitive information, or cause the application to crash.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
3.53%
Chance of exploitation in the next 30 days
Percentile
89%
Versus all other CVEs
30-day change
+0.38 pp
From 3.15% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Delta electronics1 product
- delta industrial automation dopsoftVersion 4.00.04 and prior.
Deltaww1 product
- delta_industrial_automation_dopsoft≤ 4.00.04
2 vendors · 2 products
References
2 links- ics-cert.us-cert.gov/advisories/ICSA-18-151-01X Refsource MISCThird Party AdvisoryUS Government Resource