Security Vulnerabilities fixed in Delta Electronics DOPSoft ICSA-21-005-05

Description

Delta Electronics DOPSoft Version 4.0.8.21 and prior is vulnerable to an out-of-bounds write and has a null pointer dereference issue while processing project files, which may allow an attacker to execute arbitrary code.

Affected Applications

Delta Electronics DOPSoft

CVE References

CVE-2020-27275 CVE-2020-27277

Other References

https://www.cisa.gov/uscert/ics/advisories/icsa-21-005-05