CVE-2018-10594
CRITICALDelta Industrial Automation COMMGR <1.08 - Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2018-10594.
PoCs published by Metasploit, t4rkd3vilz, ZDI, t4rkd3vilz, hubertwslin, including Metasploit module exploits/windows/scada/delta_ia_commgr_bof.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in Delta Electronics Delta Industrial Automation COMMGR 1.08 by sending a crafted packet to TCP port 502. It achieves remote code execution by overwriting the return address and executing shellcode.
Description
Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPSimulator EH2, EH3, ES2, SE, SS2 and AHSIM_5x0, AHSIM_5x1) utilize a fixed-length stack buffer where an unverified length value can be read from the network packets via a specific network port, causing the buffer to be overwritten. This may allow remote code execution, cause the application to crash, or result in a denial-of-service condition in the application server.
Exploits (3)
This Metasploit module exploits a stack-based buffer overflow in Delta Electronics Delta Industrial Automation COMMGR 1.08 by sending a crafted packet to TCP port 502. It achieves remote code execution by overwriting the return address and executing shellcode.
This exploit demonstrates a remote stack-based buffer overflow in Delta Electronics Delta Industrial Automation COMMGR by sending a crafted payload to crash the server. It establishes multiple connections and sends a large buffer of 'A's followed by 'B's to trigger the vulnerability.
This Metasploit module exploits a stack-based buffer overflow in Delta Electronics Delta Industrial Automation COMMGR 1.08 by sending a crafted packet to TCP port 502. It achieves remote code execution by overwriting the return address and executing shellcode.
References (4)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H