Description
Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Delta Electronics | CNCSoft-B Versions 1.0.0.2 and prior | — |
Advisories 1
- ICSA-21-007-04 Delta Electronics CNCSoft-B CISA ICS & IT advisories · Jan 7, 2021
References
- https://us-cert.cisa.gov/ics/advisories/icsa-21-007-04
- https://www.zerodayinitiative.com/advisories/ZDI-21-044/
- https://www.zerodayinitiative.com/advisories/ZDI-21-030/
- https://www.zerodayinitiative.com/advisories/ZDI-21-043/
- https://www.zerodayinitiative.com/advisories/ZDI-21-031/
- https://www.zerodayinitiative.com/advisories/ZDI-21-041/