CVE-2018-14824 – Delta Industrial Automation PMSoft rtl60 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

https://notcve.org/view.php?id=CVE-2018-14824

Delta Electronics Delta Industrial Automation PMSoft v2.11 or prior has an out-of-bounds read vulnerability that can be executed when processing project files, which may allow an attacker to read confidential information. Delta Industrial Automation PMSoft v2.11 o anteriores, de Delta Electronics, tiene una vulnerabilidad de lectura fuera de límites que puede ejecutarse al procesar archivos de proyecto. Esto podría permitir que un atacante lea información confidencial. This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Delta Industrial Automation PMSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of PPM files. • http://www.deltaww.com/services/DownloadCenter2.aspx?secID=8&pid=2&tid=0&CID=06&itemID=060301&typeID=1&downloadID=%2C&title=--%20Select%20Product%20Series%20--&dataType=8%3B&check=1&hl=en-US http://www.securityfocus.com/bid/105409 https://ics-cert.us-cert.gov/advisories/ICSA-18-270-04 • CWE-125: Out-of-bounds Read •