CVE-2020-27281

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A stack-based buffer overflow may exist in Delta Electronics CNCSoft ScreenEditor versions 1.01.26 and prior when processing specially crafted project files, which may allow an attacker to execute arbitrary code.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121 CWE-787

Affected software

Vendor	Product	Versions
n/a	Delta Electronics CNCSoft ScreenEditor	CNCSoft ScreenEditor Versions 1.01.26 and prior

References

https://us-cert.cisa.gov/ics/advisories/icsa-21-005-06Third Party Advisory, US Government Resource
https://www.zerodayinitiative.com/advisories/ZDI-21-039/Third Party Advisory, VDB Entry
https://us-cert.cisa.gov/ics/advisories/icsa-21-005-06Third Party Advisory, US Government Resource
https://www.zerodayinitiative.com/advisories/ZDI-21-039/Third Party Advisory, VDB Entry

Timeline

Published: Jan 11, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-272824.3In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an XML validation vulnerability in the ventilator allows privileged attacker CVE-2020-272835.3An attacker could send a specially crafted message to Crimson 3.1 (Build versions prior to 3119.001) that could leak arbitrary memory locati CVE-2020-272847.8TPEditor (v1.98 and prior) is vulnerable to two out-of-bounds write instances in the way it processes project files, allowing an attacker to CVE-2020-272859.1The default configuration of Crimson 3.1 (Build versions prior to 3119.001) allows a user to be able to read and modify the database without CVE-2020-272877.8Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds write while processing project files, which may all CVE-2020-272887.8An untrusted pointer dereference has been identified in the way TPEditor(v1.98 and prior) processes project files, allowing an attacker to c CVE-2020-272897.8Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a null pointer dereference issue while processing project files, which may allow CVE-2020-27295.4Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Advanced Console). Supported versions that are affecte CVE-2020-272904.3In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an information disclosure vulnerability in the ventilator allows attackers w CVE-2020-272917.8Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds read while processing project files, which may allo CVE-2020-272937.8Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a type confusion issue while processing project files, which may allow an attacke CVE-2020-272957.5The affected product has uncontrolled resource consumption issues, which may allow an attacker to cause a denial-of-service condition on the