Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-10947

Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple stack-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, allowing an attacker to remotely execute arbitrary code. This may occur because CNCSoft lacks user input validation before copying data from project files onto the stack.

Published

2019-04-17T15:29:00.750

Last Modified

2024-11-21T04:20:12.717

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

8.6

Impact Score

6.4

Weaknesses

Type: Secondary
CWE-121
Type: Primary
CWE-787

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	deltaww	cncsoft_screeneditor	≤ 1.00.88	Yes

References

http://www.securityfocus.com/bid/107989 Third Party Advisory, VDB Entry ([email protected])
https://ics-cert.us-cert.gov/advisories/ICSA-19-106-01 Patch, Third Party Advisory, US Government Resource ([email protected])
https://www.zerodayinitiative.com/advisories/ZDI-19-399/ Third Party Advisory, VDB Entry ([email protected])
https://www.zerodayinitiative.com/advisories/ZDI-19-400/ Third Party Advisory, VDB Entry ([email protected])
https://www.zerodayinitiative.com/advisories/ZDI-19-401/ Third Party Advisory, VDB Entry ([email protected])
https://www.zerodayinitiative.com/advisories/ZDI-19-402/ Third Party Advisory, VDB Entry ([email protected])
https://www.zerodayinitiative.com/advisories/ZDI-19-403/ Third Party Advisory, VDB Entry ([email protected])
https://www.zerodayinitiative.com/advisories/ZDI-19-404/ Third Party Advisory, VDB Entry ([email protected])
https://www.zerodayinitiative.com/advisories/ZDI-19-410/ Third Party Advisory, VDB Entry ([email protected])
https://www.zerodayinitiative.com/advisories/ZDI-19-417/ Third Party Advisory, VDB Entry ([email protected])
http://www.securityfocus.com/bid/107989 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://ics-cert.us-cert.gov/advisories/ICSA-19-106-01 Patch, Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
https://www.zerodayinitiative.com/advisories/ZDI-19-399/ Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://www.zerodayinitiative.com/advisories/ZDI-19-400/ Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://www.zerodayinitiative.com/advisories/ZDI-19-401/ Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://www.zerodayinitiative.com/advisories/ZDI-19-402/ Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://www.zerodayinitiative.com/advisories/ZDI-19-403/ Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://www.zerodayinitiative.com/advisories/ZDI-19-404/ Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://www.zerodayinitiative.com/advisories/ZDI-19-410/ Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://www.zerodayinitiative.com/advisories/ZDI-19-417/ Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)