Out-of-bounds Read Vulnerability in Delta Industrial Automation CNCSoft Software
CVE-2019-6547

5.5MEDIUM

Key Information:

Vendor

Ics-cert

Status
Delta Industrial Automation Cncsoft
Vendor
CVE Published:
19 February 2019

What is CVE-2019-6547?

An out-of-bounds read vulnerability exists in Delta Industrial Automation's CNCSoft ScreenEditor, specifically in versions 1.00.84 and earlier. This issue arises from inadequate user input validation when processing project files, which may lead to unexpected software crashes and disruptions in operation. It is crucial for users of these affected versions to apply necessary updates and implement security best practices to mitigate potential risks.

Affected Version(s)

Delta Industrial Automation CNCSoft CNCSoft ScreenEditor Version 1.00.84 and prior.

References

http://www.securityfocus.com/bid/107086
vdb-entryx_refsource_BID
https://ics-cert.us-cert.gov/advisories/ICSA-19-050-02
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.