Skip to content
Fencer Intel
critical 9.8

CVE-2018-10594 in the critical feed json

Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPSimulator EH2, EH3,…

published 8y ago modified 4mo ago also EUVD-2018-2666

cvss
9.8
version 3.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
68.3%
EPSS 68.3% chance of exploitation in 30 days, percentile 99.3%
public exploits
3
Metasploit and Exploit-DB

Summary

Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPSimulator EH2, EH3, ES2, SE, SS2 and AHSIM_5x0, AHSIM_5x1) utilize a fixed-length stack buffer where an unverified length value can be read from the network packets via a specific network port, causing the buffer to be overwritten. This may allow remote code execution, cause the application to crash, or result in a denial-of-service condition in the application server.

Is CVE-2018-10594 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-18-172-01 updated cvss 7.3

Delta Electronics Delta Industrial Automation COMMGR

  • Delta Electronics AHSIM_5x0 AHSIM_5x0, AHSIM_5x1 Delta Electronics COMMGR <=1.08 Delta Electronics DVPSimulator EH2, EH3, ES2, SS2
    affected: mitigation “Delta Electronics has released COMMGR v1.09 to address this vulnerability and recommends users upgrade. The updated version can be downloaded at:”

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Timeline

  1. Published
  2. First public exploit (Metasploit exploit/windows/scada/delta_ia_commgr_bof)

Exploit prediction

68.27% chance of exploitation in the next 30 days, higher than 99.3% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

  • Metasploit exploit/windows/scada/delta_ia_commgr_bof Delta Electronics Delta Industrial Automation COMMGR 1.08 Stack Buffer Overflow metasploit exploit, normal rank, 2018-07-02
  • EDB-45574 Delta Electronics Delta Industrial Automation COMMGR 1.08 - Stack Buffer Overflow (Metasploit) remote, 2018-10-09
  • EDB-44965 Delta Industrial Automation COMMGR 1.08 - Stack Buffer Overflow (PoC) dos, 2018-07-02

CVSS scores

assigned by version score vector
NVD 3.0 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

  • ICS-CERT Delta Industrial Automation COMMGR and accompanying PLC Simulators (DVPSimulator EH2, EH3, ES2, SE, SS2 and AHSIM_5x0, AHSIM_5x1)

Classification

Weakness
  • CWE-121 Stack-based Buffer Overflow
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.