high7.8Known exploited
CVE-2021-38406
Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-08-25. Federal due date: 2022-09-15.
The impacted product is end-of-life and should be disconnected if still in use.
Impact
Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could result in multiple out-of-bounds write instances. An attacker could leverage this vulnerability to execute code in the context of the current process.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Deltaww | Dopsoft | from 2.00 through 2.00.07 |