CVE-2021-38406

Katalog CVE

CVSS 7.8 · High KEV · sudah dieksploitasi EPSS 76,4%

Kerentanan Out-of-bounds Write pada deltaww dopsoft. Skor CVSS 3.1 7.8 (High) menurut NVD. Masuk katalog KEV CISA pada 25 Agustus 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could result in multiple out-of-bounds write instances. An attacker could leverage this vulnerability to execute code in the context of the current process.

Rincian

Terbit di NVD

17 September 2021

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

76,4% peluang dieksploitasi; lebih tinggi dari 99,5% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability

Masuk KEV

25 Agustus 2022

Tenggat CISA

15 September 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

The impacted product is end-of-life and should be disconnected if still in use.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://us-cert.cisa.gov/ics/advisories/icsa-21-252-02 advisory pihak ketiga · pemerintah AS
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-38406 pemerintah AS