Delta Electronics Update
2705Warning Date
Severity Level
Warning Number
Target Sector
21 April, 2021
● Critical
2021-2808
Communication and information technology - Energy - HealthCare - Commercial Facilities
Description:
Delta Electronics has released a security update to address a vulnerability in the following product:
- COMMGR: Version 1.12 and prior
- CNCSoft Versions 1.01.28 (with ScreenEditor Version 1.01.2) and prior
- CNCSoft-B Versions 1.0.0.3 and prior
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Buffer overflow
- Execute arbitrary code
Best practice and Recommendations:
The CERT team encourages users to review Delta Electronics security advisory and apply the necessary updates: