CVE-2021-22668

CVE-2021-22668 affects Delta Industrial Automation CNCSoft ScreenEditor, specifically versions 1.01.28 (with ScreenEditor 1.01.2) and older. The vulnerability is an out-of-bounds read during DPB/project file processing , which may allow an attacker to execute arbitrary code. Public sources concur...

CVE-2019-10949

CVE-2019-10949 corresponds to multiple out-of-bounds read vulnerabilities in Delta Industrial Automation CNCSoft ScreenEditor (and its DPB file handling) affecting version 1.00.88 and earlier. The root cause is improper validation of user-supplied data when processing DPB project files, enabling ...

CVE-2020-16199

Delta Industrial Automation CNCSoft ScreenEditor (Versions 1.01.23 and older) is affected by multiple stack-based buffer overflow vulnerabilities in DPB/project parsing (CVE-2020-16199). Affected component: ScreenEditor; root cause: unchecked lengths copied into fixed-length buffers; impact inclu...

CVE-2020-16201

Delta Industrial Automation CNCSoft ScreenEditor is affected (versions 1.01.23 and earlier) by multiple out-of-bounds read vulnerabilities triggered when parsing DPB project files. The root cause is improper validation during DPB file parsing, leading to information disclosure (read past end of a...

CVE-2019-10947

CVE-2019-10947 affects Delta Industrial Automation CNCSoft ScreenEditor (and CNCSoft ScreenEditor DPB parsing). The issue is multiple stack-based buffer overflows caused by insufficient validation when copying data from project/DPB-related inputs onto the stack, enabling remote code execution. Se...

CVE-2020-16203

Delta Industrial Automation CNCSoft ScreenEditor (versions 1.01.23 and earlier) contains an uninitialized pointer vulnerability when processing crafted project/DPB files. Exploitation may allow reading/modifying data, arbitrary code execution, or application crash. Public advisories (ZDI) report ...

CVE-2020-6976

Summary: CVE-2020-6976 impacts Delta CNCSoft ScreenEditor. Affected: CNCSoft ScreenEditor v1.00.96 and earlier. Root cause: out-of-bounds read overflow from improper validation while parsing input in DPB/GIF-related processing. Impact: information disclosure; potential for code execution when com...

CVE-2019-10951

Delta Industrial Automation CNCSoft ScreenEditor (Version 1.00.88 and prior) contains multiple heap-based buffer overflow vulnerabilities triggered by processing specially crafted project files. Root cause: lack of input validation when copying data from project files to the heap, enabling remote...

CVE-2020-7002

Delta Electronics CNCSoft ScreenEditor (CNCSoft ScreenEditor, v1.00.96 and earlier) is affected by CVE-2020-7002. The Red Hat/NVD/ZDI/CISA entries describe multiple stack-based buffer overflows in parsing DPB input (and GIF-name related data in DPB parsing) that can be exploited by a valid user o...

CVE-2021-22672

CVE-2021-22672 affects Delta Electronics CNCSoft ScreenEditor prior to v1.01.30. The root cause is an out-of-bounds write in DPB/file parsing that could corrupt data, cause a denial of service, or allow remote code execution. Impact is described as data corruption, DoS, and remote code execution ...

CVE-2021-44768

CVE-2021-44768 affects Delta Electronics CNCSoft (Versions 1.01.30 and prior). The vulnerability is an out-of-bounds read while processing a specific project file, which may allow information disclosure. The issue is not exploitable remotely according to the ICS advisory. Affected users are advis...

CVE-2020-27281

Delta Electronics CNCSoft ScreenEditor (versions 1.01.26 and earlier) is affected by a stack-based buffer overflow in the DPB/File parsing path when processing specially crafted project files, leading to arbitrary code execution. The issue (CVE-2020-27281) is documented with CVSS v3 base score 7....