title: Delta Electronics DOPSoft Stack-based Buffer Overflow
description:
Delta Electronics DOPSoft is vulnerable to a stack-based buffer overflow, which may allow for arbitrary code execution if an attacker can lead a legitimate user to execute a specially crafted file.
problem types: CWE-121 Stack-based Buffer Overflow
affected:
{
defaultStatus: unaffected
product: DOPSoft
vendor: Delta Electronics
versions:
status: affected, version: All versions
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions:
Delta Electronics has declared DOPSoft as end-of-life and recommends users to use DIAScreen instead.
This vulnerability does not exist on the newest version of DIAScreen.  Users may download the DIAScreen v1.3.1 (or newer) on the  DIAStudio download center https://diastudio.deltaww.com/home/downloads