Severity
High
Analysis Summary
CVE-2025-4124 CVSS:7.8
Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitrary code when parsing ISP file.
CVE-2025-4125 CVSS:7.8
Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitrary code when parsing ISP file.
Impact
- Code Execution
Indicators of Compromise
CVE
CVE-2025-4124
CVE-2025-4125
Affected Vendors
Delta Electronics
Affected Products
- Delta Electronics ISPSoft version 3.20
Remediation
Upgrade to the latest version of Delta Electronics ISPSoft, available from the Delta Electronics Website.