CVE-2017-16745

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A Type Confusion issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. An access of resource using incompatible type ('type confusion') vulnerability may allow an attacker to execute remote code when processing specially crafted .dpb files.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-843 CWE-704

Affected software

Vendor	Product	Versions
n/a	Delta Electronics Delta Industrial Automation Screen Editor	Delta Electronics Delta Industrial Automation Screen Editor

References

http://www.securityfocus.com/bid/102426Third Party Advisory, VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-004-01Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/102426Third Party Advisory, VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-004-01Third Party Advisory, US Government Resource

Timeline

Published: Mar 15, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-167477.8An Out-of-bounds Write issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. Spe CVE-2017-167489.8An attacker can log into the local Niagara platform (Niagara AX Framework Versions 3.8 and prior or Niagara 4 Framework Versions 4.4 and pri CVE-2017-167497.8A Use-after-Free issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. Specially CVE-2017-167517.8A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or pri CVE-2017-167537.5An Improper Input Validation issue was discovered in Advantech WebAccess versions prior to 8.3. WebAccess allows some inputs that may cause CVE-2017-167545.3Bolt before 3.3.6 does not properly restrict access to _profiler routes, related to EventListener/ProfilerListener.php and Provider/EventLis CVE-2017-167556.1An issue was discovered in Userscape HelpSpot before 4.7.2. A reflected cross-site scripting vulnerability exists in the "return" parameter CVE-2017-167568.8An issue was discovered in Userscape HelpSpot before 4.7.2. A cross-site request forgery vulnerability exists on POST requests to the "index CVE-2017-167577.8Hola VPN 1.34 has weak permissions (Everyone:F) under %PROGRAMFILES%, which allows local users to gain privileges via a Trojan horse 7za.exe CVE-2017-167584.8Cross-site scripting (XSS) vulnerability in admin/partials/uif-access-token-display.php in the Ultimate Instagram Feed plugin before 1.3 for CVE-2017-167595.9The installation process in LibreNMS before 2017-08-18 allows remote attackers to read arbitrary files, related to html/install.php.CVE-2017-167606.1Inedo BuildMaster before 5.8.2 has XSS.