CVE-2019-10949: falha em Delta Industrial Automation CNCSoft
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 2.4%
Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple out-of-bounds read vulnerabilities may be exploited, allowing information disclosure due to a lack of user input validation for processing specially crafted project files.
Produtos afetados
n/a · Delta Industrial Automation CNCSoftReferências
https://ics-cert.us-cert.gov/advisories/ICSA-19-106-01https://www.zerodayinitiative.com/advisories/ZDI-19-406/https://www.zerodayinitiative.com/advisories/ZDI-19-407/https://www.zerodayinitiative.com/advisories/ZDI-19-409/https://www.zerodayinitiative.com/advisories/ZDI-19-411/https://www.zerodayinitiative.com/advisories/ZDI-19-412/https://www.zerodayinitiative.com/advisories/ZDI-19-413/https://www.zerodayinitiative.com/advisories/ZDI-19-414/https://www.zerodayinitiative.com/advisories/ZDI-19-415/https://www.zerodayinitiative.com/advisories/ZDI-19-416/https://www.zerodayinitiative.com/advisories/ZDI-19-418/https://www.zerodayinitiative.com/advisories/ZDI-19-419/