PT-2019-18159 · Delta Industrial Automation · Cncsoft Screeneditor

CVE-2019-6547 · Publicado 2019-02-20 · Atualizado 2022-12-01

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Delta Industrial Automation CNCSoft ScreenEditor versions 1.00.84 and prior

Description An out-of-bounds read issue may cause the software to crash due to lacking user input validation for processing project files. This occurs when the software fails to properly validate user input, leading to potential crashes.

Recommendations For versions 1.00.84 and prior, consider implementing proper user input validation for project files to prevent out-of-bounds read issues. As a temporary workaround, restrict the processing of project files from untrusted sources until a fix is available.

Correção

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2019-6547

ZDI-19-225

Produtos afetados

Cncsoft Screeneditor

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2019-6547 · Nota de Segurança
• https://t.me/cvenotify/38837 · Publicação no Telegram
• https://zerodayinitiative.com/advisories/ZDI-19-225 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-19-050-02 · Correção
• https://osv.dev/vulnerability/CVE-2019-6547 · Aviso do Fabricante
• http://securityfocus.com/bid/107086 · Nota