PT-2021-15166 · Delta Electronics · Cncsoft Screeneditor

Kimiya · Published 2021-05-07 · Updated 2021-05-18 · CVE-2021-22672

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Delta Electronics' CNCSoft ScreenEditor versions prior to 1.01.30

Description The issue may allow an attacker to remotely execute arbitrary code, corrupt data, or cause a denial-of-service condition.

Recommendations For versions prior to 1.01.30, update to version 1.01.30 or later to resolve the issue.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2021-22672

ZDI-21-524

Affected Products

Cncsoft Screeneditor

References · 4

• https://zerodayinitiative.com/advisories/ZDI-21-524 · Security Note
• https://osv.dev/vulnerability/CVE-2021-22672 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-22672 · Security Note
• https://us-cert.cisa.gov/ics/advisories/icsa-21-124-02 · Note