CVE Feed

    Dashboard / CVE / CVE-2019-10949

    CVE-2019-10949

    Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple out-of-bounds read vulnerabilities may be exploited, allowing information disclosure due to a lack of user input validation for processing specially crafted project files.

    Published:Apr 17, 2019
    Last Modified:Nov 21, 2024
    EPS:Apr 17, 2019
    EPSS Score:0.00376
    CVSS Score:5.5

    Affected Products

    Vendor
    Deltaww
    Product
    Cncsoft Screeneditor

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-125 Out-of-bounds Read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Related CVEs

    CVE-2021-44768 (CVSS 6.1) — Delta Electronics CNCSoft (Version 1.01.30) and prior) is vulnerable to an out-of-bounds read while processing…
    CVE-2021-22668 (CVSS 9.8) — Delta Industrial Automation CNCSoft ScreenEditor Versions 1.01.28 (with ScreenEditor Version 1.01.2) and prior…
    CVE-2021-22672 (CVSS 7.8) — Delta Electronics' CNCSoft ScreenEditor in versions prior to v1.01.30 could allow the corruption of data, a de…
    CVE-2020-27281 (CVSS 7.8) — A stack-based buffer overflow may exist in Delta Electronics CNCSoft ScreenEditor versions 1.01.26 and prior w…
    CVE-2020-16199 (CVSS 7.8) — Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple stack-based buffer over…
    CVE-2020-16201 (CVSS 3.3) — Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple out-of-bounds read vuln…
    CVE-2020-16203 (CVSS 7.8) — Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. An uninitialized pointer may be …
    CVE-2020-6976 (CVSS 5.5) — Delta Industrial Automation CNCSoft ScreenEditor, v1.00.96 and prior. An out-of-bounds read overflow can be ex…
    CVE-2020-7002 (CVSS 7.8) — Delta Industrial Automation CNCSoft ScreenEditor, v1.00.96 and prior. Multiple stack-based buffer overflows ca…
    CVE-2019-10947 (CVSS 7.8) — Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple stack-based buff…

    References

    http://www.securityfocus.com/bid/107989
    https://ics-cert.us-cert.gov/advisories/ICSA-19-106-01
    https://www.zerodayinitiative.com/advisories/ZDI-19-406/
    https://www.zerodayinitiative.com/advisories/ZDI-19-407/
    https://www.zerodayinitiative.com/advisories/ZDI-19-409/
    https://www.zerodayinitiative.com/advisories/ZDI-19-411/
    https://www.zerodayinitiative.com/advisories/ZDI-19-412/
    https://www.zerodayinitiative.com/advisories/ZDI-19-413/
    https://www.zerodayinitiative.com/advisories/ZDI-19-414/
    https://www.zerodayinitiative.com/advisories/ZDI-19-415/
    https://www.zerodayinitiative.com/advisories/ZDI-19-416/
    https://www.zerodayinitiative.com/advisories/ZDI-19-418/
    https://www.zerodayinitiative.com/advisories/ZDI-19-419/
    http://www.securityfocus.com/bid/107989
    https://ics-cert.us-cert.gov/advisories/ICSA-19-106-01
    https://www.zerodayinitiative.com/advisories/ZDI-19-406/
    https://www.zerodayinitiative.com/advisories/ZDI-19-407/
    https://www.zerodayinitiative.com/advisories/ZDI-19-409/
    https://www.zerodayinitiative.com/advisories/ZDI-19-411/
    https://www.zerodayinitiative.com/advisories/ZDI-19-412/
    https://www.zerodayinitiative.com/advisories/ZDI-19-413/
    https://www.zerodayinitiative.com/advisories/ZDI-19-414/
    https://www.zerodayinitiative.com/advisories/ZDI-19-415/
    https://www.zerodayinitiative.com/advisories/ZDI-19-416/
    https://www.zerodayinitiative.com/advisories/ZDI-19-418/
    https://www.zerodayinitiative.com/advisories/ZDI-19-419/

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High