CISA description
Delta Electronics DOPSoft 2 lacks proper validation of user-supplied data when parsing specific project files (improper input validation) resulting in an out-of-bounds write that allows for code execution.
CVE-2021-38406
Delta Electronics · DOPSoft 2
Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability
Required action
The impacted product is end-of-life and should be disconnected if still in use.
Notes & references
Where this lands in 800-53
Vulnerability data triggers these controls during assessment and continuous monitoring.