CVE-2017-16745 json
A Type Confusion issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior.
published 2018-03-15 8 y ago modified 2026-06-17 4 mo ago also EUVD-2017-7929
- cvss
- 7.8
- version 3.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.1%
- EPSS 1.1% chance of exploitation in 30 days, percentile 64%
- public exploits
- 0
- none known
Summary
A Type Confusion issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. An access of resource using incompatible type ('type confusion') vulnerability may allow an attacker to execute remote code when processing specially crafted .dpb files.
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
cisa ICSA-18-004-01 updated cvss 5.5
Delta Electronics Delta Industrial Automation Screen Editor
-
Delta Electronics Delta Industrial Automation Screen Editor <= 2.00.23.00affected: vendor fix, mitigation “Delta Electronics recommends affected users update to the latest version of DOPSoft Version 2, which is available for download”
From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf
Exploit prediction
1.05% chance of exploitation in the next 30 days, higher than 64% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.0 | 7.8 | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 6.8 | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Affected products
- n/a Delta Electronics Delta Industrial Automation Screen Editor
Classification
References
-
ics-cert.us-cert.gov
/advisories/ICSA-18-004-01
third-party-advisory, us-government-resource
-
securityfocus.com
/bid/102426
vdb-entry, third-party-advisory
Sources
- CVE List CVE-2017-16745
- NVD CVE-2017-16745
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.