Description
All versions prior to Delta Electronic’s CNCSoft version 1.01.34 (running ScreenEditor versions 1.01.5 and prior) are vulnerable to a stack-based buffer overflow, which could allow an attacker to remotely execute arbitrary code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Delta Industrial Automation | ScreenEditor | all versions – ≤ 1.01.5 | — |
| Delta Industrial Automation | CNCSoft | all versions – < v1.01.34 | v1.01.34 |
Advisories 1
- ICSA-23-026-01 Delta Electronics CNCSoft ScreenEditor CISA ICS & IT advisories · Jan 26, 2023