login
quiescence.eu
Zum Inhalt springen

CVE-2021-38406

Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability

n/a
CVSS
77.9%
EPSS (exploit prob.)
99.5%
EPSS percentile
Yes
Actively exploited
No
Ransomware use
2022-08-25
Added

Summary

Delta Electronics DOPSoft 2 lacks proper validation of user-supplied data when parsing specific project files (improper input validation) resulting in an out-of-bounds write that allows for code execution.

Affected software

Vendor: Delta Electronics  ·  Product: DOPSoft 2

Weakness types (CWE):

CWE-787

What to do

This vulnerability appears in CISA's Known Exploited Vulnerabilities catalog, meaning it is being exploited in the wild. Prioritize patching affected systems and verify exposure across your estate.

Is your domain exposed?

Run a free, instant security report for any domain — exposure score, email auth, TLS and breach metadata.

Get your free report

All information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.