Read the docs
TI-2018-07523 Aliases CVE-2018-10636GHSA-vvcw-4mvf-gmjq

Stack-based buffer overflow in ICS-CERT CNCSoft with ScreenEditor

Priority MEDIUM 50CWE-121Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-121 and the CVSS impact.

Summary

CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has multiple stack-based buffer overflow vulnerabilities that could cause the software to crash due to lacking user input validation before copying data from project files onto the stack. Which may allow an attacker to gain remote code execution with administrator privileges if exploited.

Why it matters now

EPSS 0.09417 95th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
ICS-CERTCNCSoft with ScreenEditorCNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54—No fix listedCNA
  • CNCSoft with ScreenEditor VendorICS-CERT Affected CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:deltaww:cncsoft:*:*:*:*:*:*:*:*up to 1.00.83Vulnerabledeltaww
cpe:2.3:a:deltaww:screeneditor:1.00.54:*:*:*:*:*:*:*1.00.54Vulnerabledeltaww
  • cpe:2.3:a:deltaww:cncsoft:*:*:*:*:*:*:*:* Versions up to 1.00.83 Vulnerable ·deltaww
  • cpe:2.3:a:deltaww:screeneditor:1.00.54:*:*:*:*:*:*:* Versions 1.00.54 Vulnerable ·deltaww

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-10636
  2. 2026-10-03 Alias added: GHSA-vvcw-4mvf-gmjq

References

Advisory 1

  • TI-2021-19738 Stack-based buffer overflow in Delta Electronics CNCSoft CVSS 3.1HIGH 7.8
  • TI-2022-04235 Stack-based buffer overflow in deltaww ScreenEditor CVSS 3.1HIGH 7.8
  • TI-2018-07487 Out-of-bounds read in ICS-CERT CNCSoft with ScreenEditor CVSS 3.0HIGH 8.1
  • TI-2022-01286 Delta Electronics CNCSoft Stack-based Buffer Overflow CVSS 3.1HIGH 7.8
  • TI-2025-30214 Out-of-bounds Write in CNCSoft CVSS 4.0HIGH 7.3
  • TI-2025-30213 Out-of-bounds Write in CNCSoft CVSS 4.0HIGH 7.3
See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences