CVE-2018-10617

9.8 criticalEPSS 3.5%

Critical (9.8) in deltaww delta industrial automation dopsoft. EPSS 3.5% chance of exploitation in the next 30 days.

Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior utilizes a fixed-length heap buffer where a value larger than the buffer can be read from a .dpa file into the buffer, causing the buffer to be overwritten. This may allow remote code execution or cause the application to crash.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.5% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
CWEs: CWE-119, CWE-122
Published: 2018-06-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

deltaww:delta_industrial_automation_dopsoft

References

http://www.securityfocus.com/bid/104375
https://ics-cert.us-cert.gov/advisories/ICSA-18-151-01
http://www.securityfocus.com/bid/104375
https://ics-cert.us-cert.gov/advisories/ICSA-18-151-01

Check your stack JSON