Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple out-of-bounds read vulnerabilities may be exploited by processing specially crafted project files, which may allow an attacker to read information.
The product reads data past the end, or before the beginning, of the intended buffer.
Link | Tags |
---|---|
https://us-cert.cisa.gov/ics/advisories/icsa-20-217-01 | third party advisory us government resource |
https://www.zerodayinitiative.com/advisories/ZDI-20-944/ | third party advisory vdb entry |
https://www.zerodayinitiative.com/advisories/ZDI-20-941/ | third party advisory vdb entry |
https://www.zerodayinitiative.com/advisories/ZDI-20-945/ | third party advisory vdb entry |
https://www.zerodayinitiative.com/advisories/ZDI-20-947/ | third party advisory vdb entry |
https://www.zerodayinitiative.com/advisories/ZDI-20-946/ | third party advisory vdb entry |
https://www.zerodayinitiative.com/advisories/ZDI-20-942/ | third party advisory vdb entry |