{"id":"CVE-2018-17929","aliases":["EUVD-2018-9670","GHSA-6mpp-9prr-42c3"],"status":"published","title":"In Delta Industrial Automation TPEditor, TPEditor Versions 1.90 and prior, multiple stack-based...","description":"In Delta Industrial Automation TPEditor, TPEditor Versions 1.90 and prior, multiple stack-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files lacking user input validation before copying data from project files onto the stack and may allow an attacker to remotely execute arbitrary code.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01754,"percentile":0.78069,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-121","CWE-787"],"published":"2018-10-11T22:00:00Z","modified":"2026-06-17T01:46:33Z","products":[{"vendor":"delta electronics","product":"delta industrial automation tpeditor"},{"vendor":"deltaww","product":"tpeditor"}],"references":[{"url":"http://www.securityfocus.com/bid/105682","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-284-03","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17929"},{"url":"https://github.com/advisories/GHSA-6mpp-9prr-42c3"}],"sources":{"cve":[{"id":"CVE-2018-17929","description":"In Delta Industrial Automation TPEditor, TPEditor Versions 1.90 and prior, multiple stack-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files lacking user input validation before copying data from project files onto the stack and may allow an attacker to remotely execute arbitrary code.","status":"published","published":"2018-10-11T22:00:00Z","modified":"2024-09-17T02:16:47.17Z","cwes":["CWE-121"],"updated_at":"2026-11-02T14:35:07.672841Z"}],"euvd":[{"id":"EUVD-2018-9670","description":"In Delta Industrial Automation TPEditor, TPEditor Versions 1.90 and prior, multiple stack-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files lacking user input validation before copying data from project files onto the stack and may allow an attacker to remotely execute arbitrary code.","status":"published","published":"2018-10-11T22:00:00Z","modified":"2024-09-17T02:16:47Z","updated_at":"2026-11-03T00:28:41.906947Z"}],"ghsa":[{"id":"GHSA-6mpp-9prr-42c3","title":"In Delta Industrial Automation TPEditor, TPEditor Versions 1.90 and prior, multiple stack-based...","description":"In Delta Industrial Automation TPEditor, TPEditor Versions 1.90 and prior, multiple stack-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files lacking user input validation before copying data from project files onto the stack and may allow an attacker to remotely execute arbitrary code.","status":"published","published":"2022-05-13T01:16:13Z","modified":"2023-02-01T05:04:51Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:50:11.446996Z"}],"nvd":[{"id":"CVE-2018-17929","description":"In Delta Industrial Automation TPEditor, TPEditor Versions 1.90 and prior, multiple stack-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files lacking user input validation before copying data from project files onto the stack and may allow an attacker to remotely execute arbitrary code.","status":"published","published":"2018-10-11T22:29:00.41Z","modified":"2026-06-17T01:46:33.167Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-121","CWE-787"],"updated_at":"2026-11-02T14:04:44.873741Z"}]}}