Exploited Vulnerabilities DailyCVE-2021-38406: Delta Electronics DOPSoft 2
EPSS76.4%No. 664 of 1739 in KEV
CVE year2021~1 yrs before listing
Same vendor in KEV1
Same product1
| Field | Value |
|---|---|
| Vendor | Delta Electronics |
| Product | DOPSoft 2 |
| Name | Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability |
| Added to KEV | 2022-08-25 |
| US federal due date | 2022-09-15 |
| Ransomware use | Unknown |
| CWE | CWE-787 |
CISA description
Delta Electronics DOPSoft 2 lacks proper validation of user-supplied data when parsing specific project files (improper input validation) resulting in an out-of-bounds write that allows for code execution.
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A Delta Electronics DOPSoft 2 vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2022-08-25.