CVE-2020-27275
CVE-2020-27275
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 3.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
11 Jan 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Delta Electronics DOPSoft Version 4.0.8.21 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code.
Affected products
n/a · Delta ElectronicsWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
https://us-cert.cisa.gov/ics/advisories/icsa-21-005-05https://www.zerodayinitiative.com/advisories/ZDI-21-028/https://www.zerodayinitiative.com/advisories/ZDI-21-029/https://www.zerodayinitiative.com/advisories/ZDI-21-032/https://www.zerodayinitiative.com/advisories/ZDI-21-034/https://www.zerodayinitiative.com/advisories/ZDI-21-035/https://www.zerodayinitiative.com/advisories/ZDI-21-036/https://www.zerodayinitiative.com/advisories/ZDI-21-037/https://www.zerodayinitiative.com/advisories/ZDI-21-038/