CVE-2018-10594

CVE-2018-10594 is a critical stack buffer overflow vulnerability affecting Delta Industrial Automation COMMGR versions 1.08 and prior, along with accompanying PLC Simulators. An unverified length value from network packets can overwrite a fixed-length stack buffer, leading to remote code execution, application crashes, or denial-of-service. With a CVSS score of 9.8 (CRITICAL), this vulnerability is easily exploitable over the network with low attack complexity and no user interaction required, potentially resulting in full compromise of confidentiality, integrity, and availability. While not on the KEV catalog or Hot List, public exploit code, including a Metasploit module and Proof-of-Concept, is readily available, indicating a high potential for exploitation despite limited community discussion or media coverage.