PT-2021-11375
CVE-2020-27293
·
Published
2021-01-11
·
Updated
2021-03-09
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Delta Electronics CNCSoft-B versions 1.0.0.2 and prior
Description:
The issue is related to a type confusion problem while processing project files, which may allow an attacker to execute arbitrary code.
Recommendations:
For Delta Electronics CNCSoft-B versions 1.0.0.2 and prior, update to a version later than 1.0.0.2 to resolve the issue.
As a temporary workaround, consider restricting access to project file processing until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾