CVE Feed

    Dashboard / CVE / CVE-2021-22668

    CVE-2021-22668

    Delta Industrial Automation CNCSoft ScreenEditor Versions 1.01.28 (with ScreenEditor Version 1.01.2) and prior are vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to execute arbitrary code.

    Published:May 16, 2021
    Last Modified:Nov 21, 2024
    EPS:May 16, 2021
    EPSS Score:0.007
    CVSS Score:9.8

    Affected Products

    Vendor
    Deltaww
    Product
    Cncsoft Screeneditor

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-125 Out-of-bounds Read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Related CVEs

    CVE-2021-44768 (CVSS 6.1) — Delta Electronics CNCSoft (Version 1.01.30) and prior) is vulnerable to an out-of-bounds read while processing…
    CVE-2021-22672 (CVSS 7.8) — Delta Electronics' CNCSoft ScreenEditor in versions prior to v1.01.30 could allow the corruption of data, a de…
    CVE-2020-27281 (CVSS 7.8) — A stack-based buffer overflow may exist in Delta Electronics CNCSoft ScreenEditor versions 1.01.26 and prior w…
    CVE-2020-16199 (CVSS 7.8) — Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple stack-based buffer over…
    CVE-2020-16201 (CVSS 3.3) — Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple out-of-bounds read vuln…
    CVE-2020-16203 (CVSS 7.8) — Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. An uninitialized pointer may be …
    CVE-2020-6976 (CVSS 5.5) — Delta Industrial Automation CNCSoft ScreenEditor, v1.00.96 and prior. An out-of-bounds read overflow can be ex…
    CVE-2020-7002 (CVSS 7.8) — Delta Industrial Automation CNCSoft ScreenEditor, v1.00.96 and prior. Multiple stack-based buffer overflows ca…
    CVE-2019-10947 (CVSS 7.8) — Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple stack-based buff…
    CVE-2019-10951 (CVSS 7.8) — Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple heap-based buffe…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High