{"cvss":7.8,"datePublished":"2022-08-25","dateUpdated":"2022-08-25","description":"Delta Electronics DOPSoft 2 lacks proper validation of user-supplied data when parsing specific project files (improper input validation) resulting in an out-of-bounds write that allows for code execution.","dueDate":"2022-09-15","id":"CVE-2021-38406","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://www.cisa.gov/uscert/ics/advisories/icsa-21-252-02; https://nvd.nist.gov/vuln/detail/CVE-2021-38406","product":"DOPSoft 2","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","severity":"HIGH","source":"cisa_known_exploited","title":"Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability","vendor":"Delta Electronics"}