Delta Industrial Automation CNCSoft ICSA-19-106-01 Multiple Security Vulnerabilities
BID:107989
CVE-2019-10947 | CVE-2019-10949 | CVE-2019-10951 |Info
Delta Industrial Automation CNCSoft ICSA-19-106-01 Multiple Security Vulnerabilities
| Bugtraq ID: | 107989 |
| Class: | Input Validation Error |
| CVE: |
CVE-2019-10949 CVE-2019-10951 CVE-2019-10947 |
| Remote: | No |
| Local: | Yes |
| Published: | Apr 16 2019 12:00AM |
| Updated: | Apr 16 2019 12:00AM |
| Credit: | Natnael Samson (@NattiSamson) and an anonymous researcher working with Trend Micro�??s Zero Day Initiative (ZDI) |
| Vulnerable: |
Delta Electronics INC CNCSoft ScreenEditor 1.0.88 Delta Electronics INC CNCSoft ScreenEditor 1.0.84 |
| Not Vulnerable: |
Delta Electronics INC CNCSoft ScreenEditor 1.0.89 |
Discussion
Delta Industrial Automation CNCSoft ICSA-19-106-01 Multiple Security Vulnerabilities
Delta Industrial Automation CNCSoft is prone to multiple security vulnerabilities:
1. Multiple stack-based buffer-overflow vulnerabilities
2. Multiple heap-based buffer-overflow vulnerabilities
3. Multiple out-of-bounds read vulnerabilities
Attackers can exploit these issues to execute arbitrary code, obtain sensitive information or cause the affected application to crash.
CNCSoft ScreenEditor Version 1.00.88 and prior are vulnerable.
Delta Industrial Automation CNCSoft is prone to multiple security vulnerabilities:
1. Multiple stack-based buffer-overflow vulnerabilities
2. Multiple heap-based buffer-overflow vulnerabilities
3. Multiple out-of-bounds read vulnerabilities
Attackers can exploit these issues to execute arbitrary code, obtain sensitive information or cause the affected application to crash.
CNCSoft ScreenEditor Version 1.00.88 and prior are vulnerable.