Delta Electronics DRASimuCAD (Update A)

An attacker with local access could crash DRASimuCAD or execute arbitrary code on the engineering workstation, potentially allowing modification of simulation parameters or disruption of testing workflows for Delta control systems.

Engineering teams and process engineers using Delta Electronics DRASimuCAD simulation software for testing and validating Delta control system configurations. This affects organizations in power generation, water treatment, manufacturing, and other industries that rely on Delta PLC and controller simulation before deployment.

An attacker must have local or physical access to the workstation running DRASimuCAD. The attack vector likely involves a malicious file or user interaction (e.g., opening a crafted document or attachment). If the file triggers a memory corruption or type confusion vulnerability, the attacker could execute arbitrary code with the privileges of the DRASimuCAD user.