← CVE Radar
CVE-2021-38406Delta Electronics DOPSoft 2 Out-of-Bounds Write
Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could result in multiple out-of-bounds write instances. An attacker could leverage this vulnerability to execute code in the context of the current process.
7.8 HIGHEPSS 76.42%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.8 | HIGH | 3.1icscert (CNA) | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 6.8 | MEDIUM | 2.0NVD | AV:N/AC:M/Au:N/C:P/I:P/A:P |
CISA required action
⚡ Known exploited · remediation due Sep 15, 2022
The impacted product is end-of-life and should be disconnected if still in use.
Details
- CVE ID
- CVE-2021-38406
- Status
- Analyzed
- Assigner (CNA)
- icscert
- Published
- Sep 17, 2021
- Last modified
- 2026-06-17 04:02 UTC
- Weaknesses
- CWE-787 · Out-of-bounds Write
Affected Products
As published by the CNA in the CVE record.
Delta ElectronicsDOPSoft 21 version range
- through 2.00.07