CVE-2021-22668

2021-05-1614:43:25

CWE-125

icscert

www.cve.org

cve-2021-22668

out-of-bounds read

arbitrary code execution

project files processing

AI Score

9.8

Confidence

High

EPSS

0.008

Percentile

81.5%

JSON

Delta Industrial Automation CNCSoft ScreenEditor Versions 1.01.28 (with ScreenEditor Version 1.01.2) and prior are vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to execute arbitrary code.

CNA Affected

[
  {
    "product": "Delta Industrial Automation CNCSoft ScreenEditor",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "CNCSoft Versions 1.01.28 (with ScreenEditor Version 1.01.2) and prior"
      }
    ]
  }
]

References

us-cert.cisa.gov/ics/advisories/icsa-21-110-04