CVE-2018-10594

N/A

Published: June 26, 2018 at 08:00 PM UTC

Updated: June 17, 2026 at 01:34 AM UTC

8 products affected across 1 vendorCommgrDvpsimulator SeDvpsimulator Ahsim 5X1

Using Delta Industrial Automation COMMGR and accompanying PLC Simulators (DVPSimulator EH2, EH3, ES2, SE, SS2 and AHSIM_5x0, AHSIM_5x1) by ICS-CERT?

Get instant alerts when new vulnerabilities affect Delta Industrial Automation COMMGR and accompanying PLC Simulators (DVPSimulator EH2, EH3, ES2, SE, SS2 and AHSIM_5x0, AHSIM_5x1) - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 69%

Description

Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPSimulator EH2, EH3, ES2, SE, SS2 and AHSIM_5x0, AHSIM_5x1) utilize a fixed-length stack buffer where an unverified length value can be read from the network packets via a specific network port, causing the buffer to be overwritten. This may allow remote code execution, cause the application to crash, or result in a denial-of-service condition in the application server.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Commgr · Deltaww

95%

v ≤ 1.08

deltaww-dvpsimulator-ahsim-5x0 (environment) · deltaww-dvpsimulator-ahsim-5x1 (environment) · deltaww-dvpsimulator-eh2 (environment) · deltaww-dvpsimulator-es2 (environment) · deltaww-dvpsimulator-h3 (environment) · deltaww-dvpsimulator-se (environment) · deltaww-dvpsimulator-ss2 (environment)

Dvpsimulator Ahsim 5X0 · Deltawwdevice

80%

All versions

Dvpsimulator Ahsim 5X1 · Deltawwdevice

80%

All versions

Dvpsimulator Eh2 · Deltawwdevice

80%

All versions

Dvpsimulator Es2 · Deltawwdevice

80%

All versions