CVE-2025-4125 — ISPSoft File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVE-2025-4125

ISPSoft File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability PUBLISHED

Description (CNA)

Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitrary code when parsing ISP file.

Affected (CNA)

Vendor / product	Versions
Delta Electronics / ISPSoft	affected 0 through 3.20

CWE

CWE-787

References

https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00004_ISPSoft%20-%20Multiple%20Vulnerabilities_v2.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.