Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

Delta WPLSoft, ISPSoft, PMSoft may run malicious files

CVE-2016-5802 · published 9 years ago
Summary

Versions of Delta Electronics' WPLSoft, ISPSoft, and PMSoft before the latest releases can be tricked into reading and executing harmful files. This could let an attacker run unwanted code on systems using these programs. Update each program to the newest version to close the risk.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
delta_electronics ispsoft All versions
cpe:2.3:o:delta_electronics:ispsoft:-:*:*:*:*:*:*:*
delta_electronics pmsoft All versions
cpe:2.3:o:delta_electronics:pmsoft:-:*:*:*:*:*:*:*
delta_electronics wplsoft All versions
cpe:2.3:o:delta_electronics:wplsoft:-:*:*:*:*:*:*:*
Original advisory text
An issue was discovered in Delta Electronics WPLSoft, Versions prior to V2.42.11, ISPSoft, Versions prior to 3.02.11, and PMSoft, Versions prior to 2.10.10. Multiple instances of out-of-bounds writ...
An issue was discovered in Delta Electronics WPLSoft, Versions prior to V2.42.11, ISPSoft, Versions prior to 3.02.11, and PMSoft, Versions prior to 2.10.10. Multiple instances of out-of-bounds write conditions may allow malicious files to be read and executed by the affected software.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
7.8 High
Exploitation
1% chance of attack within 30 days
Type
CWE-787Out-of-bounds Write
Timeline
Published13 Feb 2017
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2016-5802 · NVD
Track software like this
Free during beta