Type Confusion Vulnerability in Delta Electronics CNCSoft-B Software
CVE-2020-27293

7.8HIGH

Key Information:

Vendor

Deltaww

Status
Delta Electronics
Vendor
CVE Published:
11 January 2021

What is CVE-2020-27293?

Delta Electronics CNCSoft-B software is affected by a type confusion vulnerability when processing project files. This flaw could enable an attacker to execute arbitrary code on affected systems, potentially compromising the integrity and security of the application. Users should take appropriate measures to mitigate the risks associated with this vulnerability.

Affected Version(s)

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior

References

https://us-cert.cisa.gov/ics/advisories/icsa-21-007-04
x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-21-045/
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.