CVE-2023-5944

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Delta Electronics DOPSoft is vulnerable to a stack-based buffer overflow, which may allow for arbitrary code execution if an attacker can lead a legitimate user to execute a specially crafted file.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121 CWE-787

Affected software

Vendor	Product	Versions
Delta Electronics	DOPSoft	All versions

References

https://diastudio.deltaww.com/home/downloads?sec=download#catalogPermissions Required
https://www.cisa.gov/news-events/ics-advisories/icsa-23-334-01Third Party Advisory, US Government Resource
https://diastudio.deltaww.com/home/downloads?sec=download#catalogPermissions Required
https://www.cisa.gov/news-events/ics-advisories/icsa-23-334-01Third Party Advisory, US Government Resource

Timeline

Published: Dec 4, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-59455.4The video carousel slider with lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to miss CVE-2023-59466.1The Digirisk plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'current_group_id' parameter in version 6.0.0.0 du CVE-2023-59485.5Improper Authorization in GitHub repository teamamaze/amazefileutilities prior to 1.91.CVE-2023-59497.5The SmartCrawl WordPress plugin before 3.8.3 does not prevent unauthorised users from accessing password-protected posts' content.CVE-2023-59506.1Rapid7 Velociraptor versions prior to 0.7.0-4 suffer from a reflected cross site scripting vulnerability. This vulnerability allows attacker CVE-2023-59516.1The Welcart e-Commerce WordPress plugin before 2.9.5 does not sanitise and escape a parameter before outputting it back in the page, leading CVE-2023-59529.8The Welcart e-Commerce WordPress plugin before 2.9.5 unserializes user input from cookies, which could allow unautehtniacted users to perfor CVE-2023-59538.8The Welcart e-Commerce WordPress plugin before 2.9.5 does not validate files to be uploaded, as well as does not have authorisation and CSRF CVE-2023-59547.5HashiCorp Vault and Vault Enterprise inbound client requests triggering a policy check can lead to an unbounded consumption of memory. A lar CVE-2023-59554.8The Contact Form Email WordPress plugin before 1.3.44 does not sanitise and escape some of its settings, which could allow high privilege us CVE-2023-59564.8The Wp-Adv-Quiz WordPress plugin through 1.0.2 does not sanitise and escape some of its settings, which could allow high privilege users suc CVE-2023-59577.2The Ni Purchase Order(PO) For WooCommerce WordPress plugin through 1.2.1 does not validate logo and signature image files uploaded in the se