CVE-2019-13513: deltaww delta_industrial_automation_dopsoft Out-of-bounds Read

EPSS trend

Probability

3.85%

Chance of exploitation in the next 30 days

Percentile

90%

Versus all other CVEs

30-day change

0.00 pp

From 3.85% on 21-09-2026

21-09-202621-10-2026

EPSS score

3.85%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

6 links

www.us-cert.gov/ics/advisories/icsa-19-225-01X Refsource MISCMitigationThird Party AdvisoryUS Government Resource
www.zerodayinitiative.com/advisories/ZDI-19-720/X Refsource MISCThird Party AdvisoryVDB Entry
www.zerodayinitiative.com/advisories/ZDI-19-722/X Refsource MISCThird Party AdvisoryVDB Entry
www.zerodayinitiative.com/advisories/ZDI-19-719/X Refsource MISCThird Party AdvisoryVDB Entry
www.zerodayinitiative.com/advisories/ZDI-19-718/X Refsource MISCThird Party AdvisoryVDB Entry
www.zerodayinitiative.com/advisories/ZDI-19-721/X Refsource MISCThird Party AdvisoryVDB Entry

Related vulnerabilities

CVE-2018-5476deltawwdelta_industrial_automation_dopsoft1.70%8y ago15-03-2018 23:00A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial Automation DOPSoft, Version 4.00.01 or prior. Stack-based buffer overflow vulnerabilities caused by processing specially crafted .dop or .dpb files may allow an attacker to remotely execute arbitrary code.CVE-2018-10623delta electronicsdelta industrial automation dopsoft+13.53%8y ago18-06-2018 19:00Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior performs read operations on a memory buffer where the position can be determined by a value read from a .dpa file. This may cause improper restriction of operations within the bounds of the memory buffer, allow remote code execution, alter the intended control flow, allow reading of sensitive information, or cause the application to crash.CVE-2018-10617delta electronicsdelta industrial automation dopsoft+13.53%8y ago18-06-2018 19:00Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior utilizes a fixed-length heap buffer where a value larger than the buffer can be read from a .dpa file into the buffer, causing the buffer to be overwritten. This may allow remote code execution or cause the application to crash.CVE-2018-10621delta electronicsdelta industrial automation dopsoft+13.53%8y ago18-06-2018 19:00Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior utilizes a fixed-length stack buffer where a value larger than the buffer can be read from a .dpa file into the buffer, causing the buffer to be overwritten. This may allow remote code execution or cause the application to crash.CVE-2020-10597deltawwdelta_industrial_automation_dopsoft0.80%6y ago20-03-2020 14:27Delta Industrial Automation DOPSoft, Version 4.00.08.15 and prior. Multiple out-of-bounds read vulnerabilities may be exploited by processing specially crafted project files, which may allow an attacker to read information and/or crash the application.CVE-2019-13514deltawwdelta_industrial_automation_dopsoft2.99%7y ago15-08-2019 18:42In Delta Industrial Automation DOPSoft, Version 4.00.06.15 and prior, processing a specially crafted project file may trigger a use-after-free vulnerability, which may allow information disclosure, remote code execution, or crash of the application.

All vulnerabilities indelta_industrial_automation_dopsoft

CVE-2019-13513: deltaww delta_industrial_automation_dopsoft Out-of-bounds Read

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References