CVE-2026-1361

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-1361", "assignerOrgId": "759f5e80-c8e1-4224-bead-956d7b33c98b", "state": "PUBLISHED", "assignerShortName": "Deltaww", "dateReserved": "2026-01-23T00:59:14.367Z", "datePublished": "2026-01-27T03:11:57.514Z", "dateUpdated": "2026-01-27T14:20:21.194Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "platforms": ["Windows"], "product": "ASDA-Soft", "vendor": "Delta Electronics", "versions": [{"lessThanOrEqual": "7.2.0.0", "status": "affected", "version": "0", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "coordinator", "value": "CISA"}, {"lang": "en", "type": "reporter", "value": "Zero Day Initiative (ZDI)"}], "datePublic": "2026-01-27T02:25:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "ASDA-Soft Stack-based Buffer Overflow Vulnerability"}], "value": "ASDA-Soft Stack-based Buffer Overflow Vulnerability"}], "impacts": [{"capecId": "CAPEC-100", "descriptions": [{"lang": "en", "value": "CAPEC-100 Overflow Buffers"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-121", "description": "CWE-121 Stack-based Buffer Overflow", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "759f5e80-c8e1-4224-bead-956d7b33c98b", "shortName": "Deltaww", "dateUpdated": "2026-01-27T03:11:57.514Z"}, "references": [{"url": "https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00003_ASDA-Soft%20Stack-based%20Buffer%20Overflow%20Vulnerability%20(CVE-2026-1361).pdf"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Download and update to: ASDA-Soft v7.2.2.0 or later (Delta Download Center)<br>"}], "value": "Download and update to: ASDA-Soft v7.2.2.0 or later (Delta Download Center)"}], "source": {"discovery": "EXTERNAL"}, "title": "ASDA-Soft Stack-based Buffer Overflow Vulnerability", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-01-27T14:19:01.437868Z", "id": "CVE-2026-1361", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-27T14:20:21.194Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-1361", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-01-27T14:19:01.437868Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-27T14:19:27.425Z"}}], "cna": {"title": "ASDA-Soft Stack-based Buffer Overflow Vulnerability", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "coordinator", "value": "CISA"}, {"lang": "en", "type": "reporter", "value": "Zero Day Initiative (ZDI)"}], "impacts": [{"capecId": "CAPEC-100", "descriptions": [{"lang": "en", "value": "CAPEC-100 Overflow Buffers"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Delta Electronics", "product": "ASDA-Soft", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "7.2.0.0"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Download and update to: ASDA-Soft v7.2.2.0 or later (Delta Download Center)", "supportingMedia": [{"type": "text/html", "value": "Download and update to: ASDA-Soft v7.2.2.0 or later (Delta Download Center)<br>", "base64": false}]}], "datePublic": "2026-01-27T02:25:00.000Z", "references": [{"url": "https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00003_ASDA-Soft%20Stack-based%20Buffer%20Overflow%20Vulnerability%20(CVE-2026-1361).pdf"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "ASDA-Soft Stack-based Buffer Overflow Vulnerability", "supportingMedia": [{"type": "text/html", "value": "ASDA-Soft Stack-based Buffer Overflow Vulnerability", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-121", "description": "CWE-121 Stack-based Buffer Overflow"}]}], "providerMetadata": {"orgId": "759f5e80-c8e1-4224-bead-956d7b33c98b", "shortName": "Deltaww", "dateUpdated": "2026-01-27T03:11:57.514Z"}}}, "cveMetadata": {"cveId": "CVE-2026-1361", "state": "PUBLISHED", "dateUpdated": "2026-01-27T14:20:21.194Z", "dateReserved": "2026-01-23T00:59:14.367Z", "assignerOrgId": "759f5e80-c8e1-4224-bead-956d7b33c98b", "datePublished": "2026-01-27T03:11:57.514Z", "assignerShortName": "Deltaww"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["Windows"], "product": "ASDA-Soft", "vendor": "Delta Electronics", "versions": [{"lessThanOrEqual": "7.2.0.0", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "759f5e80-c8e1-4224-bead-956d7b33c98b"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:deltaww:asda_soft:*:*:*:*:*:*:*:*", "matchCriteriaId": "483DA02E-356F-4801-9394-4B7617CDAA69", "versionEndIncluding": "7.2.2.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "ASDA-Soft Stack-based Buffer Overflow Vulnerability"}, {"lang": "es", "value": "Vulnerabilidad de desbordamiento de b\u00fafer basado en pila de ASDA-Soft."}], "id": "CVE-2026-1361", "lastModified": "2026-06-17T10:15:39.493", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "759f5e80-c8e1-4224-bead-956d7b33c98b", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-1361", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-01-27T14:19:01.437868Z", "version": "2.0.3"}}]}, "published": "2026-01-27T04:16:03.580", "references": [{"source": "759f5e80-c8e1-4224-bead-956d7b33c98b", "tags": ["Vendor Advisory"], "url": "https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00003_ASDA-Soft%20Stack-based%20Buffer%20Overflow%20Vulnerability%20(CVE-2026-1361).pdf"}], "sourceIdentifier": "759f5e80-c8e1-4224-bead-956d7b33c98b", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-121"}], "source": "759f5e80-c8e1-4224-bead-956d7b33c98b", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-787"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-18T14:57:21.786827+00:00", "value": {"mitigation_remediation": ["Download and install ASDA-Soft version 7.2.2.0 or later from Delta Electronics\u2019 Download Center", "Restrict access to ASDA-Soft management interfaces to trusted network segments to reduce exposure", "Monitor system logs for abnormal stack or memory usage patterns that could indicate exploitation attempts"], "summary": {"action": "Patch", "impact": "Potential Remote Code Execution via stack-based buffer overflow"}, "threat_synthesis": {"affected_systems": "Delta Electronics\u2019 ASDA-Soft products are affected. No specific product versions are listed in the CNA data; however, the official solution recommends upgrading to version 7.2.2.0 or later. The affected devices likely include industrial control systems that run ASDA-Soft firmware.", "description_and_impact": "This vulnerability is a stack-based buffer overflow in ASDA-Soft that can allow an attacker to corrupt the call stack and execute arbitrary code. The flaw is a classic stack corruption bug, as identified by CWE-121 and CWE-787. If successfully exploited, the attacker could gain local or higher privileges on the affected system, potentially impacting confidentiality, integrity, or availability of the device.", "risk_and_exploitability": "The CVSS vector indicates a score of 7.8, reflecting a high severity. The EPSS score of less than 1% suggests that the likelihood of exploitation in the wild is very low, and the vulnerability is not listed in CISA\u2019s KEV catalog. The attack vector is not explicitly described, so the likely attack vector is inferred to be local or remote via a privileged interface of the ASDA-Soft software, unless the device is isolated. The combination of a high CVSS score and low EPSS score places this issue in a moderate risk category, requiring a patch but posing limited immediate threat to broadly exposed systems."}}}}, "created": "2026-01-27T09:02:58.203867+00:00", "updated": "2026-04-18T15:00:03.452322+00:00", "vendors": ["delta_electronics", "delta_electronics$PRODUCT$asdasoft"]}