Type confusion

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a type confusion issue while processing project files, which may allow an attacker to execute arbitrary code...

Stack overflow

A stack-based buffer overflow may exist in Delta Electronics CNCSoft ScreenEditor versions 1.01.26 and prior when processing specially crafted project files, which may allow an attacker to execute arbitrary code...

Out-of-bounds

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to execute arbitrary code...

Null pointer dereference

Delta Electronics DOPSoft Version 4.0.8.21 and prior has a null pointer dereference issue while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2020-27281

A stack-based buffer overflow may exist in Delta Electronics CNCSoft ScreenEditor versions 1.01.26 and prior when processing specially crafted project files, which may allow an attacker to execute arbitrary code...

CVE-2020-27281

Delta Electronics CNCSoft ScreenEditor (versions 1.01.26 and earlier) is affected by a stack-based buffer overflow in the DPB/File parsing path when processing specially crafted project files, leading to arbitrary code execution. The issue (CVE-2020-27281) is documented with CVSS v3 base score 7....

CVE-2020-27293

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a type confusion issue while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2020-27293

Delta Electronics CNCSoft-B (versions 1.0.0.2 and earlier) contains a type confusion vulnerability in the processing of project files that can lead to arbitrary code execution. The issue is documented as a type-confusion flaw in the DOPSoft/DPA file parsing path (CVE-2020-27293). Exploitation con...

CVE-2020-27289

Delta Electronics CNCSoft-B is affected by CVE-2020-27289 (and related issues) where a null pointer dereference in the parsing of project files can allow arbitrary code execution. Affected product: CNCSoft-B Versions 1.0.0.2 and prior. Root cause: untrusted pointer dereference during DPA/DOPSoft ...

CVE-2020-27289

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a null pointer dereference issue while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2020-27291

Delta Electronics CNCSoft-B is affected up to version 1.0.0.2 by CVE-2020-27291 (out-of-bounds read while processing project files) that may allow arbitrary code execution. Public sources identify additional CFEs in the same family (27287/27289/27293) and an independent ZDI advisory detailing an ...

CVE-2020-27291

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2020-27287

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2020-27287

CVE-2020-27287 affects Delta Electronics CNCSoft-B (versions 1.0.0.2 and earlier). The root cause is an out-of-bounds/write condition during parsing of DOPSoft XLS project files, leading to arbitrary code execution in the affected software. Multiple sources (NVD/NVD-derived entries and ZDI adviso...

CVE-2020-27275

CVE-2020-27275 affects Delta Electronics DOPSoft (version 4.0.8.21 and earlier). Connected advisories describe a vulnerability in the XLS (and related project file formats) parsing where the parser performs an out-of-bounds/write, caused by improper validation of input data. This flaw can enable ...

CVE-2020-27275

Delta Electronics DOPSoft Version 4.0.8.21 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2020-27277

Delta Electronics DOPSoft is affected by CVE-2020-27277 (null pointer dereference) in how it processes project files, potentially enabling arbitrary code execution. The vulnerability affects DOPSoft versions up to 4.0.8.21; the ZDI advisory frames it as a remote code execution flaw in XLS file pa...

CVE-2020-27277

Delta Electronics DOPSoft Version 4.0.8.21 and prior has a null pointer dereference issue while processing project files, which may allow an attacker to execute arbitrary code...

Delta Electronics CNCSoft ScreenEditor Buffer Overflow Vulnerability (CNVD-2021-03007)

Delta Electronics CNCSoft ScreenEditor is a CNC machine simulation system software. A buffer overflow vulnerability exists in the Delta Electronics CNCSoft ScreenEditor processing project file, which can be exploited by a remote attacker to submit a specially crafted request that can be used to...

Delta Electronics CNCSoft-B 代码问题漏洞

Delta Electronics CNCSoft-B is a CNC machine simulation system software from Delta Electronics, China. A buffer overflow vulnerability exists in CNCSoft-B Versions, which is caused by a null pointer error and can be exploited by an attacker to execute arbitrary code...