A stack-based buffer overflow in Delta Electronics ASDA-Soft poses a high risk of system compromise through local user interaction.

This vulnerability is a stack-based buffer overflow (CWE-121) occurring within the ASDA-Soft software. The flaw can be triggered by an attacker through local interaction with a victim, requiring the user to open a specially crafted file or input.

The exploitation of this buffer overflow could result in unauthorized code execution with the privileges of the application user. Given the CVSS score of 7.8, this vulnerability represents a high risk to organizational security, potentially leading to total system compromise, data loss, or unauthorized access to sensitive industrial control configurations.

Immediate Action: Update the ASDA-Soft software to version 7.2.6.0 or later, which can be obtained through the official Delta Download Center.

Proactive Monitoring: Monitor system logs for abnormal application crashes or unexpected process behavior that may indicate an exploitation attempt.

Compensating Controls: Restrict access to the host machine and ensure that only trusted files are opened within the ASDA-Soft environment to mitigate the risk of triggering the overflow.

Public Exploit Available: Unknown.

Delta Electronics ASDA-Soft users must prioritize upgrading to version 7.2.6.0 immediately to remediate this buffer overflow vulnerability. Failure to patch leaves systems susceptible to potential code execution attacks, and administrators should ensure that all instances of the software are identified and updated to the latest supported release.