CVE-2023-5130

A buffer overflow vulnerability exists in Delta Electronics WPLSoft. An anonymous attacker can exploit this vulnerability by enticing a user to open a specially crafted DVP file to achieve code execution.
Configurations

Configuration 1 (hide)

cpe:2.3:a:deltaww:wplsoft:2.42.11:*:*:*:*:*:*:*

History

25 Jan 2024, 02:04

Type Values Removed Values Added
CPE cpe:2.3:a:deltaww:wplsoft:2.42.11:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 8.8
CWE CWE-120
References () https://blog.exodusintel.com/2024/01/18/delta-electronics-wplsoft-buffer-overflow/ - () https://blog.exodusintel.com/2024/01/18/delta-electronics-wplsoft-buffer-overflow/ - Third Party Advisory
First Time Deltaww wplsoft
Deltaww

18 Jan 2024, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-01-18 22:15

Updated : 2024-02-28 20:54


NVD link : CVE-2023-5130

Mitre link : CVE-2023-5130

CVE.ORG link : CVE-2023-5130


JSON object : View

Products Affected

deltaww

  • wplsoft
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer