High ICSA-19-106-01 3 CVEs

ICSA-19-106-01_Delta Industrial Automation CNCSoft

Published Apr 16, 2019 · Updated Apr 16, 2019

Vendor: Delta Electronics Product: CNCSoft ScreenEditor

Summary

Natnael Samson (@NattiSamson) and an anonymous researcher working with Trend Micro 's Zero Day Initiative (ZDI) reported these vulnerabilities to NCCIC.

Vulnerabilities 3

Unscored —

CVE-2019-10947

Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple stack-based buffer overfl…

Apr 17, 2019
Unscored —

CVE-2019-10949

Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple out-of-bounds read vulner…

Apr 17, 2019
Unscored —

CVE-2019-10951

Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple heap-based buffer overflo…

Apr 17, 2019

Revision history

2019-04-16 #1
ICSA-19-106-01 Delta Industrial Automation CNCSoft

References

ICS Advisory ICSA-19-106-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-19-106-01