Deltaww Screeneditor vulnerabilities

4 CVEs affecting Deltaww Screeneditor, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-4634, published 2023-02-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-10636, published 2018-08-13. High severity, CVSS 8.8. EPSS: 9.5% chance of exploitation in the next 30 days. CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has multiple stack-based buffer overflow vulnerabilities that could cause the software to crash due to lacking user input…
CVE-2022-4634, published 2023-02-03. High severity, CVSS 7.8. EPSS: 4.9% chance of exploitation in the next 30 days. All versions prior to Delta Electronic’s CNCSoft version 1.01.34 (running ScreenEditor versions 1.01.5 and prior) are vulnerable to a stack-based buffer overflow, which could allow an attacker to…
CVE-2018-10598, published 2018-08-13. High severity, CVSS 8.1. EPSS: 3.5% chance of exploitation in the next 30 days. CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has two out-of-bounds read vulnerabilities could cause the software to crash due to lacking user input validation for processing…
CVE-2019-6547, published 2019-02-28. Medium severity, CVSS 5.5. EPSS: 1.1% chance of exploitation in the next 30 days. Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.84 and prior. An out-of-bounds read vulnerability may cause the software to crash due to lacking user input validation for…