Buffer Overflow Vulnerability in Delta Industrial Automation CNCSoft Product

CVE-2019-10947

What is CVE-2019-10947?

The CNCSoft ScreenEditor software by Delta Industrial Automation is susceptible to multiple stack-based buffer overflow vulnerabilities. These vulnerabilities arise from the application's failure to adequately validate user inputs when processing specially crafted project files. An attacker can exploit this lack of validation to manipulate data copied to the stack, potentially leading to the remote execution of arbitrary code. Users of CNCSoft ScreenEditor should apply available updates and implement security best practices to mitigate any risk associated with these vulnerabilities.

References