CVE-2018-5476

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial Automation DOPSoft, Version 4.00.01 or prior. Stack-based buffer overflow vulnerabilities caused by processing specially crafted .dop or .dpb files may allow an attacker to remotely execute arbitrary code.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121 CWE-787

Affected software

Vendor	Product	Versions
n/a	Delta Electronics Delta Industrial Automation DOPSoft	Delta Electronics Delta Industrial Automation DOPSoft

References

http://www.securityfocus.com/bid/103195Third Party Advisory, VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-060-03Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/103195Third Party Advisory, VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-060-03Third Party Advisory, US Government Resource

Timeline

Published: Mar 15, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-54775.8An Information Exposure issue was discovered in ABB netCADOPS Web Application Version 3.4 and prior, netCADOPS Web Application Version 7.1 a CVE-2018-54786.1Contao 3.x before 3.5.32 allows XSS via the unsubscribe module in the frontend newsletter extension.CVE-2018-54796.1FoxSash ImgHosting 1.5 (according to footer information) is vulnerable to XSS attacks. The affected function is its search engine via the se CVE-2018-54817.4OnCommand Unified Manager for 7-Mode (core package) prior to 5.2.4 uses cookies that lack the secure attribute in certain circumstances maki CVE-2018-54825.3NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmissi CVE-2018-54857.8NetApp OnCommand Unified Manager for Windows versions 7.2 through 7.3 are susceptible to a vulnerability which could lead to a privilege esc CVE-2018-54867.8NetApp OnCommand Unified Manager for Linux versions 7.2 though 7.3 ship with the Java Debug Wire Protocol (JDWP) enabled which allows unauth CVE-2018-54879.8NetApp OnCommand Unified Manager for Linux versions 7.2 through 7.3 ship with the Java Management Extension Remote Method Invocation (JMX RM CVE-2018-54889.8NetApp SANtricity Web Services Proxy versions 1.10.x000.0002 through 2.12.X000.0002 and SANtricity Storage Manager 11.30.0X00.0004 through 1 CVE-2018-54896.5NetApp 7-Mode Transition Tool allows users with valid credentials to access functions and information which may have been intended to be res CVE-2018-54908.8Read-Only export policy rules are not correctly enforced in Clustered Data ONTAP 8.3 Release Candidate versions and therefore may allow more CVE-2018-54929.8NetApp E-Series SANtricity OS Controller Software 11.30 and later version 11.30.5 is susceptible to unauthenticated remote code execution.