Stack-Based Buffer Overflow Vulnerability in Delta Electronics CNCSoft ScreenEditor
CVE-2020-27281

7.8HIGH

Key Information:

Vendor

Deltaww

Status
Delta Electronics Cncsoft Screeneditor
Vendor
CVE Published:
11 January 2021

What is CVE-2020-27281?

A vulnerability exists in Delta Electronics CNCSoft ScreenEditor versions 1.01.26 and earlier due to a stack-based buffer overflow when handling specifically crafted project files. This flaw could enable an attacker to execute arbitrary code, posing significant security risks. Users of the affected versions are urged to update their software to mitigate this risk.

Affected Version(s)

Delta Electronics CNCSoft ScreenEditor CNCSoft ScreenEditor Versions 1.01.26 and prior

References

https://us-cert.cisa.gov/ics/advisories/icsa-21-005-06
x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-21-039/
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.