CVE-2017-16749

HIGH

Delta Industrial Automation Screen Editor < 2.00.23.00 - Use-After-Free via Crafted .dpb File

Title source: llm

Description

A Use-after-Free issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. Specially crafted .dpb files could exploit a use-after-free vulnerability.

References (2)

Core 2

Core References

Third Party Advisory, US Government Resource x_refsource_misc

https://ics-cert.us-cert.gov/advisories/ICSA-18-004-01

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/102426

Scores

CVSS v3 7.8

EPSS 0.0018

EPSS Percentile 38.8%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-416

Status published

Products (1)

deltaww/delta_industrial_automation_screen_editor < 2.00.23.00

Published Mar 15, 2018

Tracked Since Feb 18, 2026