Out-of-Bounds Read Vulnerabilities in Delta Industrial Automation CNCSoft
CVE-2019-10949

5.5MEDIUM

Key Information:

Vendor

Deltaww

Status
Delta Industrial Automation Cncsoft
Vendor
CVE Published:
17 April 2019

What is CVE-2019-10949?

CNCSoft ScreenEditor versions 1.00.88 and earlier are susceptible to multiple out-of-bounds read vulnerabilities. These flaws arise from inadequate user input validation while processing specially crafted project files, potentially allowing an attacker to disclose sensitive information. It’s critical for users of these versions to implement updates and review security practices to mitigate risks associated with these vulnerabilities.

Affected Version(s)

Delta Industrial Automation CNCSoft CNCSoft ScreenEditor Version 1.00.88 and prior.

References

https://ics-cert.us-cert.gov/advisories/ICSA-19-106-01
x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-19-418/
x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-19-406/
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.