Delta Electronics EIP Builder

An attacker with local access to a machine running EIP Builder could trick a user into opening a malicious file, potentially exposing sensitive configuration data or project information stored on that machine.

Organizations using Delta Electronics EIP Builder for industrial process design and configuration should prioritize this update. EIP Builder is used by system integrators, maintenance teams, and process engineers who develop and manage control logic for Delta industrial equipment. The vulnerability affects engineering workstations and office machines where EIP Builder projects are edited.

An attacker crafts a malicious XML file (or similar document) that exploits unsafe external entity processing. If a user opens this file in EIP Builder, the application processes the dangerous external entity and may disclose sensitive information from the system where EIP Builder is running, such as configuration files or project data.