Delta Electronics CNCSoft Out-of-bounds Read
CVE-2021-44768

6.1MEDIUM

Key Information:

Vendor
Delta Electronics
Status
Cncsoft
Vendor
CVE Published:
25 March 2022

Summary

Delta Electronics CNCSoft (Version 1.01.30) and prior) is vulnerable to an out-of-bounds read while processing a specific project file, which may allow an attacker to disclose information.

Affected Version(s)

CNCSoft <= 1.01.30

References

https://www.cisa.gov/uscert/ics/advisories/icsa-21-350-02
x_refsource_CONFIRM

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Michael Heinzl reported these vulnerabilities to CISA.
.