CVE-2023-5068

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Delta Electronics DIAScreen may write past the end of an allocated buffer while parsing a specially crafted input file. This could allow an attacker to execute code in the context of the current process.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
Delta Electronics	DIAScreen	< v1.3.2

References

https://diastudio.deltaww.com/home/downloads?sec=download#catalogPermissions Required
https://www.cisa.gov/news-events/ics-advisories/icsa-23-264-03Third Party Advisory, US Government Resource
https://diastudio.deltaww.com/home/downloads?sec=download#catalogPermissions Required
https://www.cisa.gov/news-events/ics-advisories/icsa-23-264-03Third Party Advisory, US Government Resource

Timeline

Published: Sep 21, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-506857.5An issue in Hipcam Cameras RealServer v.1.0 allows a remote attacker to cause a denial of service via a crafted script to the client_port pa CVE-2023-506928.8File Upload vulnerability in JIZHICMS v.2.5, allows remote attacker to execute arbitrary code via a crafted file uploaded and downloaded to CVE-2023-506939.8An issue in Jester v.0.6.0 and before allows a remote attacker to send a malicious crafted request.CVE-2023-506949.8An issue in dom96 HTTPbeast v.0.4.1 and before allows a remote attacker to send a malicious crafted request due to insufficient parsing in t CVE-2023-50706.5The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to CVE-2023-507007.8Insecure Permissions vulnerability in Deepin dde-file-manager 6.0.54 and earlier allows privileged operations to be called by unprivileged u CVE-2023-507028.8Sikka SSCWindowsService 5 2023-09-14 executes a program as LocalSystem but allows full control by low-privileged users (and low-privileged u CVE-2023-507035.9An attacker with network access could perform a man-in-the-middle (MitM) attack and capture sensitive information to gain unauthorized acces CVE-2023-507046.1An attacker could construct a URL within the application that causes a redirection to an arbitrary external domain and could be leveraged to CVE-2023-507055.3An attacker could create malicious requests to obtain sensitive information about the web server.CVE-2023-507064.3A user without administrator permissions with access to the UC500 windows system could perform a memory dump of the running processes and ex CVE-2023-507077.5Through the exploitation of active user sessions, an attacker could send custom requests to cause a denial-of-service condition on the devic