Read the docs
TI-2018-07487 Aliases CVE-2018-10598GHSA-wp6v-hmrg-73q2

Out-of-bounds read in ICS-CERT CNCSoft with ScreenEditor

Priority MEDIUM 41CWE-125Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · None · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has two out-of-bounds read vulnerabilities could cause the software to crash due to lacking user input validation for processing project files. Which may allow an attacker to gain remote code execution with administrator privileges if exploited.

Why it matters now

EPSS 0.03475 89th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
ICS-CERTCNCSoft with ScreenEditorCNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54—No fix listedCNA
  • CNCSoft with ScreenEditor VendorICS-CERT Affected CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:deltaww:cncsoft:*:*:*:*:*:*:*:*up to 1.00.83Vulnerabledeltaww
cpe:2.3:a:deltaww:screeneditor:1.00.54:*:*:*:*:*:*:*1.00.54Vulnerabledeltaww
  • cpe:2.3:a:deltaww:cncsoft:*:*:*:*:*:*:*:* Versions up to 1.00.83 Vulnerable ·deltaww
  • cpe:2.3:a:deltaww:screeneditor:1.00.54:*:*:*:*:*:*:* Versions 1.00.54 Vulnerable ·deltaww

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-10598
  2. 2026-10-03 Alias added: GHSA-wp6v-hmrg-73q2

References

Advisory 1

  • TI-2018-07523 Stack-based buffer overflow in ICS-CERT CNCSoft with ScreenEditor CVSS 3.1HIGH 8.8
  • TI-2021-19738 Stack-based buffer overflow in Delta Electronics CNCSoft CVSS 3.1HIGH 7.8
  • TI-2022-04235 Stack-based buffer overflow in deltaww ScreenEditor CVSS 3.1HIGH 7.8
  • TI-2022-01286 Delta Electronics CNCSoft Stack-based Buffer Overflow CVSS 3.1HIGH 7.8
  • TI-2025-30214 Out-of-bounds Write in CNCSoft CVSS 4.0HIGH 7.3
  • TI-2025-30213 Out-of-bounds Write in CNCSoft CVSS 4.0HIGH 7.3
See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences