PT-2019-12125 · Delta Electronics · Cncsoft Screeneditor

Published 2019-07-22 · Updated 2019-10-09 · CVE-2019-10992

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Delta Electronics CNCSoft ScreenEditor versions 1.00.89 and prior

Description The issue is related to multiple out-of-bounds read vulnerabilities that may cause information disclosure. This is due to lacking user input validation for processing project files.

Recommendations For versions 1.00.89 and prior, update to a version later than 1.00.89 to resolve the issue.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2019-10992

ZDI-19-674

ZDI-19-675

Affected Products

Cncsoft Screeneditor

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2019-10992 · Security Note
• https://us-cert.gov/ics/advisories/icsa-19-192-01 · Patch
• https://zerodayinitiative.com/advisories/ZDI-19-675 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-19-674 · Security Note
• https://osv.dev/vulnerability/CVE-2019-10992 · Vendor Advisory