{"id":"CVE-2020-10597","aliases":["EUVD-2020-3045","GHSA-xjhq-mcqp-qfx3"],"status":"published","title":"The affected insulin pump is designed to communicate using a wireless RF with an Insulet...","description":"Delta Industrial Automation DOPSoft, Version 4.00.08.15 and prior. Multiple out-of-bounds read vulnerabilities may be exploited by processing specially crafted project files, which may allow an attacker to read information and/or crash the application.","severity":{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00805,"percentile":0.572,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125"],"published":"2020-03-20T14:27:16Z","modified":"2026-06-17T02:48:04Z","products":[{"vendor":"delta electronics","product":"delta industrial automation dopsoft"},{"vendor":"deltaww","product":"delta_industrial_automation_dopsoft"}],"references":[{"url":"https://www.us-cert.gov/ics/advisories/icsa-20-182-01","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10597"},{"url":"https://www.us-cert.gov/ics/advisories/icsma-20-079-01"},{"url":"https://github.com/advisories/GHSA-xjhq-mcqp-qfx3"}],"sources":{"cve":[{"id":"CVE-2020-10597","description":"Delta Industrial Automation DOPSoft, Version 4.00.08.15 and prior. Multiple out-of-bounds read vulnerabilities may be exploited by processing specially crafted project files, which may allow an attacker to read information and/or crash the application.","status":"published","published":"2020-03-20T14:27:16Z","modified":"2024-08-04T11:06:10.167Z","cwes":["CWE-125"],"updated_at":"2026-11-02T14:35:48.213211Z"}],"euvd":[{"id":"EUVD-2020-3045","description":"Delta Industrial Automation DOPSoft, Version 4.00.08.15 and prior. Multiple out-of-bounds read vulnerabilities may be exploited by processing specially crafted project files, which may allow an attacker to read information and/or crash the application.","status":"published","published":"2020-03-20T14:27:16Z","modified":"2024-08-04T11:06:10Z","updated_at":"2026-11-03T03:07:49.909738Z"}],"ghsa":[{"id":"GHSA-xjhq-mcqp-qfx3","title":"The affected insulin pump is designed to communicate using a wireless RF with an Insulet...","description":"The affected insulin pump is designed to communicate using a wireless RF with an Insulet manufactured Personal Diabetes Manager device. This wireless RF communication protocol does not properly implement authentication or authorization. An attacker with access to one of the affected insulin pump models may be able to modify and/or intercept data. This vulnerability could also allow attackers to change pump settings and control insulin delivery.","status":"published","published":"2022-05-24T17:12:03Z","modified":"2023-01-29T05:01:55Z","cwes":["CWE-125"],"updated_at":"2026-11-02T14:44:56.825456Z"}],"nvd":[{"id":"CVE-2020-10597","description":"Delta Industrial Automation DOPSoft, Version 4.00.08.15 and prior. Multiple out-of-bounds read vulnerabilities may be exploited by processing specially crafted project files, which may allow an attacker to read information and/or crash the application.","status":"published","published":"2020-03-20T15:15:13.42Z","modified":"2026-06-17T02:48:04.167Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:05:56.580228Z"}]}}