Stack-Based Buffer Overflow Vulnerability in Delta Industrial Automation CNCSoft ScreenEditor
CVE-2020-7002

7.8HIGH

Key Information:

Vendor

Deltaww

Status
Delta Industrial Automation Cncsoft Screeneditor
Vendor
CVE Published:
18 March 2020

What is CVE-2020-7002?

The CNCSoft ScreenEditor from Delta Industrial Automation has multiple vulnerabilities related to stack-based buffer overflows. These vulnerabilities can be exploited when a legitimate user opens a specially crafted and malicious input file. As a result, attackers may gain unauthorized access, potentially leading to the execution of arbitrary code within the affected application. Users are advised to update to the latest version to mitigate any risks associated with this vulnerability.

Affected Version(s)

Delta Industrial Automation CNCSoft ScreenEditor CNCSoft ScreenEditor v1.00.96 and prior

References

https://www.us-cert.gov/ics/advisories/icsa-20-077-01
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.