Description
Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, allowing an attacker to remotely execute arbitrary code. There is a lack of user input validation before copying data from project files onto the heap.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Delta Industrial Automation CNCSoft | CNCSoft ScreenEditor Version 1.00.88 and prior. | — |
Advisories 1
- ICSA-19-106-01 ICSA-19-106-01_Delta Industrial Automation CNCSoft CISA ICS & IT advisories · Apr 16, 2019