Summary
Successful exploitation of these vulnerabilities could allow an attacker to gain remote code execution with administrator privileges.
Vulnerabilities 2
-
Unscored —
CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has two out-of-bounds read vulnerabilities could ca…
-
Unscored —
CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has multiple stack-based buffer overflow vulnerabil…
Revision history
-
#1
ICSA-18-219-01 Delta Electronics CNCSoft and ScreenEditor
References
-
ICS Advisory ICSA-18-219-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-18-219-01
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B