CVE-2019-10947: fallo en Delta Industrial Automation CNCSoft
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 3.7%
Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple stack-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, allowing an attacker to remotely execute arbitrary code. This may occur because CNCSoft lacks user input validation before copying data from project files onto the stack.
Productos afectados
n/a · Delta Industrial Automation CNCSoftReferencias
https://ics-cert.us-cert.gov/advisories/ICSA-19-106-01https://www.zerodayinitiative.com/advisories/ZDI-19-399/https://www.zerodayinitiative.com/advisories/ZDI-19-400/https://www.zerodayinitiative.com/advisories/ZDI-19-401/https://www.zerodayinitiative.com/advisories/ZDI-19-402/https://www.zerodayinitiative.com/advisories/ZDI-19-403/https://www.zerodayinitiative.com/advisories/ZDI-19-404/https://www.zerodayinitiative.com/advisories/ZDI-19-410/https://www.zerodayinitiative.com/advisories/ZDI-19-417/http://www.securityfocus.com/bid/107989