CVE-2018-10594 : Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prio

Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPSimulator EH2, EH3, ES2, SE, SS2 and AHSIM_5x0, AHSIM_5x1) utilize a fixed-length stack buffer where an unverified length value can be read from the network packets via a specific network port, causing the buffer to be overwritten. This may allow remote code execution, cause the application to crash, or result in a denial-of-service condition in the application server.

Published 2018-06-26 20:29:00

Updated 2019-10-09 23:32:52

Source ICS-CERT

View at NVD, CVE.org

Vulnerability category: OverflowExecute codeDenial of service

Products affected by CVE-2018-10594

Deltaww » Commgr
Versions up to, including, (<=) 1.08
cpe:2.3:a:deltaww:commgr:*:*:*:*:*:*:*:*
Matching versions
When used together with: Deltaww » Dvpsimulator Ahsim 5x0 » Version: N/A
When used together with: Deltaww » Dvpsimulator Ahsim 5x1 » Version: N/A
When used together with: Deltaww » Dvpsimulator Eh2 » Version: N/A
When used together with: Deltaww » Dvpsimulator Es2 » Version: N/A
When used together with: Deltaww » Dvpsimulator H3 » Version: N/A
When used together with: Deltaww » Dvpsimulator Se » Version: N/A
When used together with: Deltaww » Dvpsimulator Ss2 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2018-10594

EPSS FAQ

60.83%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 98 %

Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2018-10594

Delta Electronics Delta Industrial Automation COMMGR 1.08 Stack Buffer Overflow

Disclosure Date: 2018-07-02

First seen: 2020-04-26

exploit/windows/scada/delta_ia_commgr_bof

This module exploits a stack based buffer overflow in Delta Electronics Delta Industrial Automation COMMGR 1.08. The vulnerability exists in COMMGR.exe when handling specially crafted packets. This module has been tested successfully on Delta Electronics Delta Indust

More information

CVSS scores for CVE-2018-10594

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2018-10594

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Assigned by: nvd@nist.gov (Primary)
CWE-121 Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Assigned by: ics-cert@hq.dhs.gov (Secondary)

References for CVE-2018-10594

https://ics-cert.us-cert.gov/advisories/ICSA-18-172-01

Delta Electronics Delta Industrial Automation COMMGR | CISA
Third Party Advisory;US Government Resource
https://www.exploit-db.com/exploits/44965/

Delta Industrial Automation COMMGR 1.08 - Stack Buffer Overflow (PoC)
Exploit;Third Party Advisory;VDB Entry
https://www.exploit-db.com/exploits/45574/

Delta Electronics Delta Industrial Automation COMMGR 1.08 - Stack Buffer Overflow (Metasploit)
Exploit;Third Party Advisory;VDB Entry
http://www.securityfocus.com/bid/104529

Delta Industrial Automation COMMGR CVE-2018-10594 Stack Based Buffer Overflow Vulnerability
Third Party Advisory;VDB Entry

Jump to