CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has multiple stack-based buffer overflow vulnerabilities that could cause the software to crash due to lacking user input validation before copying data…
Delta Electronics CNCSoft Versions 1.01.30 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code.
All versions prior to Delta Electronic’s CNCSoft version 1.01.34 (running ScreenEditor versions 1.01.5 and prior) are vulnerable to a stack-based buffer overflow, which could allow an attacker to remotely execute arbitra…
CVSS 3.1HIGH 7.8·Local·No auth·User interaction·EPSS 0.04922·Published 2023-02-02·Fixed in v1.01.34CWE-121
CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has two out-of-bounds read vulnerabilities could cause the software to crash due to lacking user input validation for processing project files.
CNCSoft: All versions prior to 1.01.32 does not properly sanitize input while processing a specific project file, allowing a possible stack-based buffer overflow condition.
CVSS 3.1HIGH 7.8·Local·No auth·User interaction·EPSS 0.02226·Published 2022-08-31·Fixed in 1.01.32CWE-121
Delta Electronics CNCSoft (All versions prior to 1.01.32) does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds read condition.
CVSS 3.1HIGH 7.1·Local·No auth·User interaction·EPSS 0.00325·Published 2022-08-31·Fixed in 1.01.32CWE-125