Severity
High
Analysis Summary
CVE-2022-1402 CVSS:7.8
The affected product does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds read condition.
CVE-2022-1403 CVSS:7.8
The affected product does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds write condition.
Impact
- Arbitrary Code Execution
- Information Disclosure
Indicators Of Compromise
CVE
- CVE-2022-1402
- CVE-2022-1403
Affected Vendors
- Delta Electronics
Affected Products
- ASDA-Soft: Version 5.4.1.0 and prior
Remediation
Refer to CISA-CERT Advisory for the patch, upgrade, or suggested workaround information.