CVE-2020-16201: Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
First published: Tue Aug 04 2020(Updated: )
Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple out-of-bounds read vulnerabilities may be exploited by processing specially crafted project files, which may allow an attacker to read information.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Deltaww Cncsoft Screeneditor | <=1.01.23 | |
| Delta Industrial Automation CNCSoft ScreenEditor | ||
| Delta Electronics Industrial Automation CNCSoft ScreenEditor Versions 1.01.23 and prior |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://us-cert.cisa.gov/ics/advisories/icsa-20-217-01
- https://www.zerodayinitiative.com/advisories/ZDI-20-941/
- https://www.zerodayinitiative.com/advisories/ZDI-20-942/
- https://www.zerodayinitiative.com/advisories/ZDI-20-944/
- https://www.zerodayinitiative.com/advisories/ZDI-20-945/
- https://www.zerodayinitiative.com/advisories/ZDI-20-946/
- https://www.zerodayinitiative.com/advisories/ZDI-20-947/
- https://www.cisa.gov/news-events/ics-advisories/icsa-20-217-01 (Advisory)
Frequently Asked Questions
What is the CVE ID for this vulnerability?
CVE-2020-16201
What is the affected software?
Delta Industrial Automation CNCSoft ScreenEditor
How does the vulnerability impact affected installations?
It allows remote attackers to disclose sensitive information.
What is the severity of CVE-2020-16201?
The severity is medium (3.3).
How can the vulnerability be exploited?
User interaction is required, such as visiting a malicious page or opening a malicious file.
- agent/type
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/title
- agent/weakness
- agent/severity
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-20-944
- alias/ZDI-CAN-10883
- alias/CVE-2020-16201
- agent/software-canonical-lookup
- alias/ZDI-20-942
- alias/ZDI-CAN-10882
- alias/ZDI-20-946
- alias/ZDI-CAN-10887
- alias/ZDI-20-947
- alias/ZDI-CAN-10888
- alias/ZDI-20-945
- alias/ZDI-CAN-10885
- alias/ZDI-20-941
- alias/ZDI-CAN-10886
- agent/references
- collector/ics-cert-advisory
- source/ICS
- agent/softwarecombine
- agent/tags
- agent/event
- agent/trending
- vendor/deltaww
- canonical/deltaww cncsoft screeneditor
- version/deltaww cncsoft screeneditor/1.01.23
- vendor/delta industrial automation
- canonical/delta industrial automation cncsoft screeneditor
- vendor/delta electronics
- canonical/delta electronics industrial automation cncsoft screeneditor versions 1.01.23 and prior