CVE-2021-43982

Delta Electronics CNCSoft (CNCSoft) vulnerable to a stack-based buffer overflow in the DPB file parsing within the ScreenEditor module. Affects CNCSoft versions 1.01.30 and earlier. Root cause: insufficient length validation before copying data to a fixed-size stack buffer, enabling arbitrary cod...

Delta Electronics CNCSoft

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Delta Electronics Equipment: CNCSoft Vulnerability: Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could allow for arbitrary code execution. 3. TECHNICAL DETAILS 3.1 AFFECTED...