Delta Industrial Automation CNCSoft-B DOPSoft XLS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation CNCSoft-B. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2020-27289

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a null pointer dereference issue while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2020-27289

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a null pointer dereference issue while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2020-27291

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2020-27287

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2020-27291

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2020-27293

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a type confusion issue while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2020-27293

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a type confusion issue while processing project files, which may allow an attacker to execute arbitrary code...

Out-of-bounds

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code...

Null pointer dereference

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a null pointer dereference issue while processing project files, which may allow an attacker to execute arbitrary code...

Type confusion

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a type confusion issue while processing project files, which may allow an attacker to execute arbitrary code...

Out-of-bounds

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2020-27293

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a type confusion issue while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2020-27293

Delta Electronics CNCSoft-B (versions 1.0.0.2 and earlier) contains a type confusion vulnerability in the processing of project files that can lead to arbitrary code execution. The issue is documented as a type-confusion flaw in the DOPSoft/DPA file parsing path (CVE-2020-27293). Exploitation con...

CVE-2020-27289

Delta Electronics CNCSoft-B is affected by CVE-2020-27289 (and related issues) where a null pointer dereference in the parsing of project files can allow arbitrary code execution. Affected product: CNCSoft-B Versions 1.0.0.2 and prior. Root cause: untrusted pointer dereference during DPA/DOPSoft ...

CVE-2020-27289

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a null pointer dereference issue while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2020-27291

Delta Electronics CNCSoft-B is affected up to version 1.0.0.2 by CVE-2020-27291 (out-of-bounds read while processing project files) that may allow arbitrary code execution. Public sources identify additional CFEs in the same family (27287/27289/27293) and an independent ZDI advisory detailing an ...

CVE-2020-27291

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2020-27287

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2020-27287

CVE-2020-27287 affects Delta Electronics CNCSoft-B (versions 1.0.0.2 and earlier). The root cause is an out-of-bounds/write condition during parsing of DOPSoft XLS project files, leading to arbitrary code execution in the affected software. Multiple sources (NVD/NVD-derived entries and ZDI adviso...