CVEvulnerability
CVE-2020-27281
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-01-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-121, CWE-787
Description
A stack-based buffer overflow may exist in Delta Electronics CNCSoft ScreenEditor versions 1.01.26 and prior when processing specially crafted project files, which may allow an attacker to execute arbitrary code.
Affected configurations
• deltaww cncsoft screeneditor (<= 1.01.26)
Related
References
- https://us-cert.cisa.gov/ics/advisories/icsa-21-005-06 Third Party Advisory, US Government Resource
- https://www.zerodayinitiative.com/advisories/ZDI-21-039/ Third Party Advisory, VDB Entry
- https://us-cert.cisa.gov/ics/advisories/icsa-21-005-06 Third Party Advisory, US Government Resource
- https://www.zerodayinitiative.com/advisories/ZDI-21-039/ Third Party Advisory, VDB Entry