CVE-2025-4124
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Apr 30, 2025
Updated: May 2, 2025
CWE ID 787
Summary
CVE-2025-4124 is a newly identified vulnerability affecting Delta Electronics' ISPSoft version 3.20. The issue involves an Out-of-Bounds Write vulnerability in the software's ISP file parsing functionality. attackers can exploit this weakness to execute arbitrary code on impacted systems, potentially leading to significant security risks and unauthorized system access. Organizations using ISPSoft version 3.20 are strongly advised to apply the necessary patches or upgrades as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- ISPSoft