Delta Electronics Delta Industrial Automation TPEditor (Update A)

An attacker who tricks an operator into opening a malicious file could crash TPEditor or execute code on the engineering workstation, potentially compromising the ability to monitor or reprogram industrial controllers and enabling downstream attacks on connected control systems.

Manufacturing facilities using Delta Industrial Automation TPEditor for PLC programming and configuration are affected. This includes any engineering or automation technician who uses this software to develop, test, or modify control logic for Delta industrial controllers. Small to mid-size manufacturers with in-house automation teams are particularly at risk if they lack formal security awareness training.

An attacker crafts a malicious file (likely a project or configuration file format that TPEditor reads) and sends it to an operator via email or other means. When the operator opens the file in TPEditor, the buffer overflow is triggered, either crashing the application or allowing code execution on that workstation. From there, the attacker could access the engineering network and connected PLCs or other industrial devices.