CVE Feed

    Dashboard / CVE / CVE-2019-10951

    CVE-2019-10951

    Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, allowing an attacker to remotely execute arbitrary code. There is a lack of user input validation before copying data from project files onto the heap.

    Published:Apr 17, 2019
    Last Modified:Nov 21, 2024
    EPS:Apr 17, 2019
    EPSS Score:0.00918
    CVSS Score:7.8

    Affected Products

    Vendor
    Deltaww
    Product
    Cncsoft Screeneditor

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-92 Forced Integer Overflow

    Related CVEs

    CVE-2021-44768 (CVSS 6.1) — Delta Electronics CNCSoft (Version 1.01.30) and prior) is vulnerable to an out-of-bounds read while processing…
    CVE-2021-22668 (CVSS 9.8) — Delta Industrial Automation CNCSoft ScreenEditor Versions 1.01.28 (with ScreenEditor Version 1.01.2) and prior…
    CVE-2021-22672 (CVSS 7.8) — Delta Electronics' CNCSoft ScreenEditor in versions prior to v1.01.30 could allow the corruption of data, a de…
    CVE-2020-27281 (CVSS 7.8) — A stack-based buffer overflow may exist in Delta Electronics CNCSoft ScreenEditor versions 1.01.26 and prior w…
    CVE-2020-16199 (CVSS 7.8) — Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple stack-based buffer over…
    CVE-2020-16201 (CVSS 3.3) — Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple out-of-bounds read vuln…
    CVE-2020-16203 (CVSS 7.8) — Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. An uninitialized pointer may be …
    CVE-2020-6976 (CVSS 5.5) — Delta Industrial Automation CNCSoft ScreenEditor, v1.00.96 and prior. An out-of-bounds read overflow can be ex…
    CVE-2020-7002 (CVSS 7.8) — Delta Industrial Automation CNCSoft ScreenEditor, v1.00.96 and prior. Multiple stack-based buffer overflows ca…
    CVE-2019-10947 (CVSS 7.8) — Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple stack-based buff…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High