CVE-2019-10947 Vulnerability Details

  /     /     /  

CVE-2019-10947 Metadata Quick Info

CVE Published: 17/04/2019 | CVE Updated: 04/08/2024 | CVE Year: 2019
Source: icscert | Vendor: n/a | Product: Delta Industrial Automation CNCSoft
Status : PUBLISHED

---

CVE-2019-10947 Description

Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple stack-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, allowing an attacker to remotely execute arbitrary code. This may occur because CNCSoft lacks user input validation before copying data from project files onto the stack.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-121
CWE Name: STACK-BASED BUFFER OVERFLOW CWE-121
Source: n/a

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).