Skip to content
OpenAdvisories
High ICSA-22-132-01 2 CVEs

Delta Electronics CNCSoft

Published May 12, 2022 · Updated May 12, 2022

Vendor: Delta Electronics Product: CNCSoft

Summary

Successful exploitation of these vulnerabilities could allow arbitrary code execution or information disclosure.

Vulnerabilities 2

  • High 7.8
    CVE-2022-1405

    Delta Electronics CNCSoft Stack-based Buffer Overflow

    CNCSoft: All versions prior to 1.01.32 does not properly sanitize input while processing a specific project file, allowing a possible stack-based buffer overflow condition.

    Delta Electronics CNCSoft ICS / OT
  • Low 3.3
    CVE-2022-1404

    Delta Electronics CNCSoft Out-of-bounds Read

    Delta Electronics CNCSoft (All versions prior to 1.01.32) does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds read condition.

    Delta Electronics CNCSoft ICS / OT

Revision history

  1. #1

    ICSA-22-132-01 Delta Electronics CNCSoft

References