Vulnerability Description
A stack-based buffer overflow may exist in Delta Electronics CNCSoft ScreenEditor versions 1.01.26 and prior when processing specially crafted project files, which may allow an attacker to execute arbitrary code.
CVSS Score
7.8
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Deltaww | Cncsoft Screeneditor | <= 1.01.26 |
Related Weaknesses (CWE)
References
- https://us-cert.cisa.gov/ics/advisories/icsa-21-005-06Third Party AdvisoryUS Government Resource
- https://www.zerodayinitiative.com/advisories/ZDI-21-039/Third Party AdvisoryVDB Entry
- https://us-cert.cisa.gov/ics/advisories/icsa-21-005-06Third Party AdvisoryUS Government Resource
- https://www.zerodayinitiative.com/advisories/ZDI-21-039/Third Party AdvisoryVDB Entry
FAQ
What is CVE-2020-27281?
CVE-2020-27281 is a vulnerability with a CVSS score of 7.8 (HIGH). A stack-based buffer overflow may exist in Delta Electronics CNCSoft ScreenEditor versions 1.01.26 and prior when processing specially crafted project files, which may allow an attacker to execute arb...
How severe is CVE-2020-27281?
CVE-2020-27281 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-27281?
Check the references section above for vendor advisories and patch information. Affected products include: Deltaww Cncsoft Screeneditor.