CVE-2023-43820— Delta Electronics Delta Industrial Automation DOPSoft DPS File wLogTitlesPrevValueLen Buffer Overflow Remote Code Execution
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2023-43820
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Delta Electronics Delta Industrial Automation DOPSoft DPS File wLogTitlesPrevValueLen Buffer Overflow Remote Code Execution
Source: NVD (National Vulnerability Database)
Vulnerability Description
A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesPrevValueLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to achieve remote code execution.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
内存缓冲区边界内操作的限制不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Delta Electronics DOPSoft 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Delta Electronics DOPSoft是中国台湾台达电子（Delta Electronics）公司的一套人机界面（HMI）软件。 Delta Electronics DOPSoft 存在安全漏洞，该漏洞源于解析 DPS 文件的 wLogTitlesPrevValueLen 字段时存在基于堆栈的缓冲区溢出漏洞。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Delta Electronics | DOPSoft | 2.00.00.00 ~ 2.00.07.04 | - |
II. Public POCs for CVE-2023-43820
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-43820
请登录查看更多情报信息。
Same Patch Batch · Delta Electronics · 2024-01-18 · 12 CVEs total
| CVE-2023-43824 | 8.8 HIGH | Delta Electronics Delta Industrial Automation DOPSoft DPS File wTitleTextLen Buffer Overfl |
| CVE-2023-43823 | 8.8 HIGH | Delta Electronics Delta Industrial Automation DOPSoft DPS File wTTitleLen Buffer Overflow |
| CVE-2023-43822 | 8.8 HIGH | Delta Electronics Delta Industrial Automation DOPSoft DPS File wLogTitlesTimeLen Buffer Ov |
| CVE-2023-43821 | 8.8 HIGH | Delta Electronics Delta Industrial Automation DOPSoft DPS File wLogTitlesActionLen Buffer |
| CVE-2023-43819 | 8.8 HIGH | Delta Electronics Delta Industrial Automation DOPSoft DPS File InitialMacroLen Buffer Over |
| CVE-2023-43818 | 8.8 HIGH | Delta Electronics Delta Industrial Automation DOPSoft DPS File wTextLen Buffer Overflow Re |
| CVE-2023-5131 | 8.2 HIGH | Delta Electronics ISPSoft Heap Buffer-Overflow |
| CVE-2023-5130 | 8.2 HIGH | Delta Electronics WPLSoft Buffer-Overflow |
| CVE-2023-43817 | 7.5 HIGH | Delta Electronics Delta Industrial Automation DOPSoft DPS File wMailContentLen Buffer Over |
| CVE-2023-43815 | 7.1 HIGH | Delta Electronics Delta Industrial Automation DOPSoft DPS File wScreenDESCTextLen Buffer O |
| CVE-2023-43816 | 6.3 MEDIUM | Delta Electronics Delta Industrial Automation DOPSoft DPS File wKPFStringLen Buffer Overfl |
IV. Related Vulnerabilities
Same product: DOPSoft
- CVE-2023-43824
Delta Electronics Delta Industrial Automation DOPSoft DPS Fi - CVE-2023-43823
Delta Electronics Delta Industrial Automation DOPSoft DPS Fi - CVE-2023-43822
Delta Electronics Delta Industrial Automation DOPSoft DPS Fi - CVE-2023-43821
Delta Electronics Delta Industrial Automation DOPSoft DPS Fi - CVE-2023-43819
Delta Electronics Delta Industrial Automation DOPSoft DPS Fi
Same vendor: Delta Electronics
- CVE-2026-1361
ASDA-Soft Stack-based Buffer Overflow Vulnerability - CVE-2026-0975
DIAView - Command Injection Vulnerability - CVE-2025-62581
DIAView - Authentication Bypass Vulnerability - CVE-2025-62582
DIAView - Authentication Bypass Vulnerability - CVE-2025-15359
DVP-12SE11T - Out-of-bound memory write Vulnerability
Same weakness: CWE-119
- CVE-2026-22167
GPU DDK - Cache resident PM buffers writable by other GPU re - CVE-2026-27890
Firebird has Pre-Auth DOS when Processing Out of Order CNCT_ - CVE-2026-34864
Huawei HarmonyOS 安全漏洞 - CVE-2026-4149
Sonos Era 300 SMB Response Out-Of-Bounds Access Remote Code - CVE-2026-34988
Wasmtime leaks data between pooling allocator instances
V. Comments for CVE-2023-43820
No comments yet