EXPOSURES › CVE-2021-38406

CVE-2021-38406

HIGH ⌖ ON CISA KEV · EXPLOITED

DETAIL

SourceCISA-KEV · kev Published2022-08-25 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2021-38406 ↗

⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 72/100 rceexploited-in-wildunpatched

Delta DOPSoft 2 RCE due to improper input validation

Delta Electronics' DOPSoft 2 allowed an out-of-bounds write due to improper input validation, enabling remote code execution. This was actively exploited in the wild, impacting the integrity of engineering projects.

Shame score — Active exploitation in the wild indicates negligence in security practices.

▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED

Delta Electronics · vendor DOPSoft 2 · product

DESCRIPTION

Delta Electronics DOPSoft 2 lacks proper validation of user-supplied data when parsing specific project files (improper input validation) resulting in an out-of-bounds write that allows for code execution.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.