Delta Electronics ISPSoft Out-of-Bounds Write Vulnerability Allowing Arbitrary Code Execution

An out-of-bounds write vulnerability has been identified in Delta Electronics ISPSoft version 3.20 and prior. This vulnerability could allow an attacker to execute arbitrary code when the application is parsing ISP files.

Impact

Exploitation of this vulnerability could lead to a stack-based buffer overflow, allowing for arbitrary code execution.

Remediation

Users are advised to download and update to ISPSoft version 3.21 or later. For assistance, contact Delta Electronics through their customer service portal.