CVE-2019-10949

MEDIUM

Deltaww Cncsoft Screeneditor < 1.00.88 - Out-of-Bounds Read

Title source: rule
STIX 2.1

Description

Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple out-of-bounds read vulnerabilities may be exploited, allowing information disclosure due to a lack of user input validation for processing specially crafted project files.

References (13)

Core 13
Core References
Patch, Third Party Advisory, US Government Resource x_refsource_misc
https://ics-cert.us-cert.gov/advisories/ICSA-19-106-01
Third Party Advisory x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-19-418/
Third Party Advisory x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-19-406/
Third Party Advisory x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-19-419/
Third Party Advisory x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-19-412/
Third Party Advisory x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-19-413/
Third Party Advisory x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-19-416/
Third Party Advisory x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-19-411/
Third Party Advisory x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-19-415/
Third Party Advisory x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-19-407/
Third Party Advisory x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-19-409/
Third Party Advisory x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-19-414/
Third Party Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/107989

Scores

CVSS v3 5.5
EPSS 0.0036
EPSS Percentile 58.4%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Details

CWE
CWE-125
Status published
Products (1)
deltaww/cncsoft_screeneditor < 1.00.88
Published Apr 17, 2019
Tracked Since Feb 18, 2026