High ICSA-20-217-01 3 CVEs

Delta Industrial Automation CNCSoft ScreenEditor

Published Aug 4, 2020 · Updated Aug 4, 2020

Vendor: Delta Electronics Product: Industrial Automation CNCSoft ScreenEditor

Summary

Successful exploitation of these vulnerabilities could allow an attacker to read/modify information, execute arbitrary code, and/or crash the application.

Vulnerabilities 3

Unscored —

CVE-2020-16199

Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple stack-based buffer overflow vuln…

Aug 4, 2020
Unscored —

CVE-2020-16201

Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple out-of-bounds read vulnerabiliti…

Aug 4, 2020
Unscored —

CVE-2020-16203

Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. An uninitialized pointer may be exploited…

Aug 4, 2020

Revision history

2020-08-04 #1
ICSA-20-217-01 Delta Industrial Automation CNCSoft ScreenEditor

References

ICS Advisory ICSA-20-217-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-20-217-01
Recommended Practices
https://www.us-cert.gov/ncas/tips/ST04-014
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B