Delta Electronics CNCSoft Out-of-bounds Read
CVE-2022-1404

3.3LOW

Key Information:

Vendor

Delta Electronics
Status
Cncsoft
Vendor
CVE Published:
31 August 2022

What is CVE-2022-1404?

Delta Electronics CNCSoft (All versions prior to 1.01.32) does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds read condition.

Affected Version(s)

CNCSoft All versions prior to 1.01.32

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-01
x_refsource_MISC

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2022-1404 : Delta Electronics CNCSoft Out-of-bounds Read