Delta Electronics DTM Soft

An attacker with access to a workstation running DTM Soft could trick a user into opening a malicious file, leading to file encryption and data theft from the engineering environment. This could disrupt engineering workflows and compromise sensitive process configuration data.

This affects Delta Electronics DTM Soft users, primarily industrial engineers and automation technicians who use the application for configuring and managing Delta automation devices and systems. Engineering workstations and development environments are at risk.

An attacker creates a malicious file (likely a serialized object or DTM Soft project file) and sends it to an engineer. When the engineer opens the file in DTM Soft, the unsafe deserialization flaw allows the attacker's code to run, encrypting files on the workstation and exfiltrating data. Exploitation requires social engineering and user interaction; remote exploitation is not possible.