CVE Feed

    Dashboard / CVE / CVE-2020-6976

    CVE-2020-6976

    Delta Industrial Automation CNCSoft ScreenEditor, v1.00.96 and prior. An out-of-bounds read overflow can be exploited when a valid user opens a specially crafted, malicious input file due to the lack of validation.

    Published:Mar 18, 2020
    Last Modified:Nov 21, 2024
    EPS:Mar 18, 2020
    EPSS Score:0.00265
    CVSS Score:5.5

    Affected Products

    Vendor
    Deltaww
    Product
    Cncsoft Screeneditor

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-125 Out-of-bounds Read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Related CVEs

    CVE-2021-44768 (CVSS 6.1) — Delta Electronics CNCSoft (Version 1.01.30) and prior) is vulnerable to an out-of-bounds read while processing…
    CVE-2021-22668 (CVSS 9.8) — Delta Industrial Automation CNCSoft ScreenEditor Versions 1.01.28 (with ScreenEditor Version 1.01.2) and prior…
    CVE-2021-22672 (CVSS 7.8) — Delta Electronics' CNCSoft ScreenEditor in versions prior to v1.01.30 could allow the corruption of data, a de…
    CVE-2020-27281 (CVSS 7.8) — A stack-based buffer overflow may exist in Delta Electronics CNCSoft ScreenEditor versions 1.01.26 and prior w…
    CVE-2020-16199 (CVSS 7.8) — Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple stack-based buffer over…
    CVE-2020-16201 (CVSS 3.3) — Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple out-of-bounds read vuln…
    CVE-2020-16203 (CVSS 7.8) — Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. An uninitialized pointer may be …
    CVE-2020-7002 (CVSS 7.8) — Delta Industrial Automation CNCSoft ScreenEditor, v1.00.96 and prior. Multiple stack-based buffer overflows ca…
    CVE-2019-10947 (CVSS 7.8) — Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple stack-based buff…
    CVE-2019-10951 (CVSS 7.8) — Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple heap-based buffe…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High