CVE-2020-16201

EPSS 1.4%CWE-125

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 1.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

04 Aug 2020Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple out-of-bounds read vulnerabilities may be exploited by processing specially crafted project files, which may allow an attacker to read information.

Affected products

n/a · Delta Industrial Automation CNCSoft ScreenEditor

References

https://us-cert.cisa.gov/ics/advisories/icsa-20-217-01 https://www.zerodayinitiative.com/advisories/ZDI-20-941/https://www.zerodayinitiative.com/advisories/ZDI-20-942/https://www.zerodayinitiative.com/advisories/ZDI-20-944/https://www.zerodayinitiative.com/advisories/ZDI-20-945/https://www.zerodayinitiative.com/advisories/ZDI-20-946/https://www.zerodayinitiative.com/advisories/ZDI-20-947/