CVE-2018-10594
Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPSimulator EH2, EH3, ES2, SE, SS2 and AHS…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Delta Electronics Delta Industrial Automation COMMGR 1.08 - Stack Buffer Overflow (Metasploit)2018-10-09 · remote · windows · Verified
- Delta Industrial Automation COMMGR 1.08 - Stack Buffer Overflow (PoC)2018-07-02 · dos · hardware
Impact
Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPSimulator EH2, EH3, ES2, SE, SS2 and AHSIM_5x0, AHSIM_5x1) utilize a fixed-length stack buffer where an unverified length value can be read from the network packets via a specific network port, causing the buffer to be overwritten. This may allow remote code execution, cause the application to crash, or result in a denial-of-service condition in the application server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Deltaww | Commgr | through 1.08 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/104529
- https://ics-cert.us-cert.gov/advisories/ICSA-18-172-01
- https://www.exploit-db.com/exploits/44965/
- https://www.exploit-db.com/exploits/45574/
- http://www.securityfocus.com/bid/104529
- https://ics-cert.us-cert.gov/advisories/ICSA-18-172-01
- https://www.exploit-db.com/exploits/44965/
- https://www.exploit-db.com/exploits/45574/