CVE-2023-5944

low-risk

Published 2023-12-04

Delta Electronics DOPSoft is vulnerable to a stack-based buffer overflow, which may allow for arbitrary code execution if an attacker can lead a legitimate user to execute a specially crafted file.

Do I need to act?

0.11% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.8/10 High

LOCAL / LOW complexity

Affected Products (1)

Dopsoft

Affected Vendors

Deltaww

References (4)

Permissions Required https://diastudio.deltaww.com/home/downloads?sec=download#catalog

Third Party Advisory https://www.cisa.gov/news-events/ics-advisories/icsa-23-334-01

Permissions Required https://diastudio.deltaww.com/home/downloads?sec=download#catalog

Third Party Advisory https://www.cisa.gov/news-events/ics-advisories/icsa-23-334-01

/ 100

low-risk

Severity 24/34 · High

Exploitability 0/34 · Minimal

Exposure 5/34 · Minimal