PT-2019-18159 · Delta Industrial Automation · Cncsoft Screeneditor

Published 2019-02-20 · Updated 2022-12-01 · CVE-2019-6547

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Delta Industrial Automation CNCSoft ScreenEditor versions 1.00.84 and prior

Description An out-of-bounds read issue may cause the software to crash due to lacking user input validation for processing project files. This occurs when the software fails to properly validate user input, leading to potential crashes.

Recommendations For versions 1.00.84 and prior, consider implementing proper user input validation for project files to prevent out-of-bounds read issues. As a temporary workaround, restrict the processing of project files from untrusted sources until a fix is available.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2019-6547

ZDI-19-225

Affected Products

Cncsoft Screeneditor

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2019-6547 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-19-225 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-19-050-02 · Patch
• https://osv.dev/vulnerability/CVE-2019-6547 · Vendor Advisory
• https://t.me/cvenotify/38837 · Telegram Post
• http://securityfocus.com/bid/107086 · Note