CVE-2020-27291

Delta Electronics CNCSoft-B is affected up to version 1.0.0.2 by CVE-2020-27291 (out-of-bounds read while processing project files) that may allow arbitrary code execution. Public sources identify additional CFEs in the same family (27287/27289/27293) and an independent ZDI advisory detailing an ...

CVE-2020-27287

CVE-2020-27287 affects Delta Electronics CNCSoft-B (versions 1.0.0.2 and earlier). The root cause is an out-of-bounds/write condition during parsing of DOPSoft XLS project files, leading to arbitrary code execution in the affected software. Multiple sources (NVD/NVD-derived entries and ZDI adviso...

CVE-2020-27287

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2020-27275

Delta Electronics DOPSoft Version 4.0.8.21 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2020-27275

CVE-2020-27275 affects Delta Electronics DOPSoft (version 4.0.8.21 and earlier). Connected advisories describe a vulnerability in the XLS (and related project file formats) parsing where the parser performs an out-of-bounds/write, caused by improper validation of input data. This flaw can enable ...

CVE-2020-27277

Delta Electronics DOPSoft Version 4.0.8.21 and prior has a null pointer dereference issue while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2020-27277

Delta Electronics DOPSoft is affected by CVE-2020-27277 (null pointer dereference) in how it processes project files, potentially enabling arbitrary code execution. The vulnerability affects DOPSoft versions up to 4.0.8.21; the ZDI advisory frames it as a remote code execution flaw in XLS file pa...

CVE-2020-27291: Out-of-bounds Read

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to execute arbitrary code...

PT-2021-11375

Name of the Vulnerable Software and Affected Versions: Delta Electronics CNCSoft-B versions 1.0.0.2 and prior Description: The issue is related to a type confusion problem while processing project files, which may allow an attacker to execute arbitrary code. Recommendations: For Delta Electronics...

CVE-2020-27281: Stack-based Buffer Overflow

A stack-based buffer overflow may exist in Delta Electronics CNCSoft ScreenEditor versions 1.01.26 and prior when processing specially crafted project files, which may allow an attacker to execute arbitrary code...

CVE-2020-27277: Untrusted Pointer Dereference

Delta Electronics DOPSoft Version 4.0.8.21 and prior has a null pointer dereference issue while processing project files, which may allow an attacker to execute arbitrary code...

PT-2021-11359

Name of the Vulnerable Software and Affected Versions: Delta Electronics DOPSoft versions 4.0.8.21 and prior Description: The issue is related to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code. Recommendations: For versions 4.0.8.21 an...

PT-2021-11370

Name of the Vulnerable Software and Affected Versions: Delta Electronics CNCSoft-B versions 1.0.0.2 and prior Description: The issue is related to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code. Recommendations: For Delta Electronics...

PT-2021-11374

Name of the Vulnerable Software and Affected Versions: Delta Electronics CNCSoft-B versions 1.0.0.2 and prior Description: The issue is related to an out-of-bounds read that occurs while processing project files, potentially allowing an attacker to execute arbitrary code. Recommendations: For Del...

PT-2021-11361

Name of the Vulnerable Software and Affected Versions: Delta Electronics DOPSoft versions 4.0.8.21 and prior Description: The issue is related to a null pointer dereference while processing project files, which may allow an attacker to execute arbitrary code. Recommendations: For versions 4.0.8.2...

CVE-2020-27287: Out-of-bounds Write

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2020-27293: Access of Resource Using Incompatible Type

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a type confusion issue while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2020-27289: Untrusted Pointer Dereference

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a null pointer dereference issue while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2020-27275: Out-of-bounds Write

Delta Electronics DOPSoft Version 4.0.8.21 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code...

Delta Electronics CNCSoft ScreenEditor Buffer Overflow Vulnerability (CNVD-2021-03007)

Delta Electronics CNCSoft ScreenEditor is a CNC machine simulation system software. A buffer overflow vulnerability exists in the Delta Electronics CNCSoft ScreenEditor processing project file, which can be exploited by a remote attacker to submit a specially crafted request that can be used to...