medium
6.1
CWE
125
Advisory Published
Updated

CVE-2021-44768: Delta Electronics CNCSoft Out-of-bounds Read

First published: Fri Mar 25 2022(Updated: )

Delta Electronics CNCSoft (Version 1.01.30) and prior) is vulnerable to an out-of-bounds read while processing a specific project file, which may allow an attacker to disclose information.

Credit: ics-cert@hq.dhs.gov

Affected SoftwareAffected VersionHow to fix
Deltaww Cncsoft Screeneditor<=1.01.30
Delta Electronics CNCSoft Versions 1.01.30 and prior

Remedy

Delta Electronics recommends users upgrade to the latest available patch. Delta Electronics also recommends users apply the following mitigations to reduce the risk of exploit: Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the Internet. Locate control system networks and remote devices behind firewalls and isolate them from the business network. When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as its connected devices.

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

Frequently Asked Questions

  • What is the vulnerability ID for this Delta Electronics CNCSoft vulnerability?

    The vulnerability ID for this Delta Electronics CNCSoft vulnerability is CVE-2021-44768.

  • What is the severity of CVE-2021-44768?

    The severity of CVE-2021-44768 is medium with a severity value of 5.5.

  • What software versions are affected by CVE-2021-44768?

    Delta Electronics CNCSoft (Version 1.01.30) and prior) is affected by CVE-2021-44768.

  • What is the impact of CVE-2021-44768?

    CVE-2021-44768 may allow an attacker to disclose information through an out-of-bounds read while processing a specific project file in Delta Electronics CNCSoft.

  • Is there a fix for CVE-2021-44768?

    At the moment, there is no information available regarding a fix for CVE-2021-44768. It is recommended to follow the guidance provided by the vendor or the official advisory.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203