CVE-2021-22672: Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
First published: Mon May 10 2021(Updated: )
Delta Electronics' CNCSoft ScreenEditor in versions prior to v1.01.30 could allow the corruption of data, a denial-of-service condition, or code execution. The vulnerability may allow an attacker to remotely execute arbitrary code.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Deltaww Cncsoft Screeneditor | <1.01.30 | |
| Delta Industrial Automation CNCSoft ScreenEditor | ||
| Delta Electronics CNCSoft ScreenEditor versions prior to v1.01.30 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2021-22672.
What is the severity level of CVE-2021-22672?
The severity level of CVE-2021-22672 is high.
What software is affected by CVE-2021-22672?
Delta Industrial Automation CNCSoft ScreenEditor versions up to and excluding 1.01.30 are affected by CVE-2021-22672.
How can CVE-2021-22672 be exploited?
CVE-2021-22672 can be exploited by remote attackers executing arbitrary code on affected installations of Delta Industrial Automation CNCSoft ScreenEditor through user interaction with a malicious page or file.
Are there any references available for CVE-2021-22672?
Yes, you can find references for CVE-2021-22672 at the following links: - [US-CERT Advisory](https://us-cert.cisa.gov/ics/advisories/icsa-21-124-02) - [Zero Day Initiative Advisory](https://www.zerodayinitiative.com/advisories/ZDI-21-524/)
- agent/type
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/title
- agent/weakness
- agent/severity
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/references
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-21-524
- alias/ZDI-CAN-12977
- alias/CVE-2021-22672
- agent/software-canonical-lookup
- agent/event
- collector/ics-cert-advisory
- source/ICS
- agent/softwarecombine
- agent/tags
- agent/trending
- vendor/deltaww
- canonical/deltaww cncsoft screeneditor
- vendor/delta industrial automation
- canonical/delta industrial automation cncsoft screeneditor
- vendor/delta electronics
- canonical/delta electronics cncsoft screeneditor versions prior to v1.01.30