This vulnerability is an out‑of‑bounds read flaw in Delta ISPSoft that can be triggered by remote attackers. The flaw allows an attacker to read memory locations outside the bounds of a buffer, resulting in disclosure of sensitive data stored in the application’s memory space. The impact is a confidentiality breach; no evidence in the input indicates integrity or availability damage. The weakness is classified as CWE‑125.

The affected product is Delta ISPSoft from vendor Deltaww. No specific version range is supplied, but the vendor’s advisory states that upgrading to ISPSoft v3.25 or later mitigates the flaw. Systems running any earlier version are considered vulnerable.

The CVSS score of 7 indicates high severity, and the flaw can be exploited remotely as the description notes remote attackers can trigger the out‑of‑bounds read. The EPSS score is not available, so the exact likelihood of exploitation is uncertain; however, the lack of an EPSS entry and the absence of a KEV listing suggest no widespread exploitation has been observed to date. Based on the description, the likely attack vector is via network interfaces that expose ISPSoft, so attackers may send specially crafted requests to induce the memory read. The vulnerability is therefore a high‑risk, remotely exploitable information disclosure flaw.