7.8Hoch
CVE-2025-4124ISPSoft File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Beschreibung
Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitrary code when parsing ISP file.
Schwachstellentyp (CWE):
CWE-787
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| Delta Electronics | ISPSoft | ≤ 3.20 | |
| deltaww | ispsoft | < 3.21 |
Referenzen und Patches
CPE-Treffer (NVD) (1)
cpe:2.3:a:deltaww:ispsoft:*:*:*:*:*:*:*:*< 3.21