CVE-2019-10949

MITTEL 5.5CVE-2019-10949 · Published 17/04/2019 · updated 17/06/2026

Kurz gesagt

CVE-2019-10949 ist eine Schwachstelle (MITTEL (CVSS 5.5)) in cncsoft screeneditor (deltaww).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 2.4%, höher als bei 84.1% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
cncsoft screeneditor deltaww	`≤ 1.00.88`	No fix yet

Description

Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple out-of-bounds read vulnerabilities may be exploited, allowing information disclosure due to a lack of user input validation for processing specially crafted project files.

References

securityfocus.com/bid/107989 · Third Party Advisory
ics-cert.us-cert.gov/advisories/ICSA-19-106-01 · Patch
zerodayinitiative.com/advisories/ZDI-19-406 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-19-407 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-19-409 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-19-411 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-19-412 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-19-413 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-19-414 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-19-415 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-19-416 · Third Party Advisory

Weitere Schwachstellen in cncsoft screeneditor

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

cncsoft screeneditor

deltaww

≤ 1.00.88

No fix yet

Weitere Schwachstellen in cncsoft screeneditor

Alle anzeigen →