CVE-2019-6547: Input Validation

Q: What is CVE-2019-6547?

CVE-2019-6547 is a vulnerability in Delta Industrial Automation CNCSoft ScreenEditor, allowing an out-of-bounds read that can cause the software to crash.

Q: How severe is CVE-2019-6547?

CVE-2019-6547 has a severity rating of 5.5, which is considered medium.

Q: Which software version is affected by CVE-2019-6547?

Delta Industrial Automation CNCSoft ScreenEditor Version 1.00.84 and prior are affected by CVE-2019-6547.

Q: What is the Common Weakness Enumeration (CWE) for CVE-2019-6547?

The Common Weakness Enumeration (CWE) for CVE-2019-6547 is CWE-20 and CWE-125.

Q: How can I fix CVE-2019-6547?

To fix CVE-2019-6547, it is recommended to update Delta Industrial Automation CNCSoft ScreenEditor to a version beyond 1.00.84.

Published Feb 28, 2019

Updated

Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.84 and prior. An out-of-bounds read vulnerability may cause the software to crash due to lacking user input validation for processing project files.

Affected Software

1 affected component

Deltaww Screeneditor<=1.00.84

Remediation

Patch Available

https://ics-cert.us-cert.gov/advisories/ICSA-19-050-02

Event History

Feb 28, 2019

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

DescriptionWeakness

Data Sourced

via NVD·09:29 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2019-6547?

CVE-2019-6547 is a vulnerability in Delta Industrial Automation CNCSoft ScreenEditor, allowing an out-of-bounds read that can cause the software to crash.

How severe is CVE-2019-6547?

CVE-2019-6547 has a severity rating of 5.5, which is considered medium.

Which software version is affected by CVE-2019-6547?