← Vulnerability feed

Vulnerability record · CVE-2020-27293 · published 11 January 2021

CVE-2020-27293: Deltaww cncsoft-b type confusion vulnerability

Deltaww · Cncsoft B

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a type confusion issue while processing project files, which may allow an attacker to execute arbitrary code.

7.8 CVSS 3.1 High EPSS 2.0% · top 20.3% CWE-843 · Type confusion
7.8CVSS 3.1 base score, v2 6.8
2.0%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a type confusion issue while processing project files, which may allow an attacker to execute arbitrary code.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://us-cert.cisa.gov/ics/advisories/icsa-21-007-04 Third Party AdvisoryUS Government Resource
https://www.zerodayinitiative.com/advisories/ZDI-21-045/ Third Party AdvisoryVDB Entry
https://us-cert.cisa.gov/ics/advisories/icsa-21-007-04 Third Party AdvisoryUS Government Resource
https://www.zerodayinitiative.com/advisories/ZDI-21-045/ Third Party AdvisoryVDB Entry

Track CVE-2020-27293 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2024-1941Deltaww cncsoft-b stack-based buffer overflow vulnerabilityDelta Electronics CNCSoft-B versions 1.0.0.4 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitr…EPSS 0.74%7.8CVE-2024-1595Deltaww cncsoft-b uncontrolled search path element vulnerabilityDelta Electronics CNCSoft-B DOPSoft prior to v4.0.0.82 insecurely loads libraries, which may allow an attacker to use DLL hijacking and take over the…EPSS 0.39%7.8CVE-2023-4685Deltaww cncsoft-b stack-based buffer overflow vulnerabilityDelta Electronics' CNCSoft-B version 1.0.0.4 and DOPSoft versions 4.0.0.82 and prior are vulnerable to stack-based buffer overflow, which could allow…EPSS 0.23%7.8CVE-2023-24014Deltaww cncsoft-b heap-based buffer overflow vulnerabilityDelta Electronics' CNCSoft-B DOPSoft versions 1.0.0.4 and prior are vulnerable to heap-based buffer overflow, which could allow an attacker to execut…EPSS 0.23%7.8CVE-2023-25177Deltaww cncsoft-b stack-based buffer overflow vulnerabilityDelta Electronics' CNCSoft-B DOPSoft versions 1.0.0.4 and prior are vulnerable to stack-based buffer overflow, which could allow an attacker to execu…EPSS 0.35%7.8CVE-2020-27287Deltaww cncsoft-b out-of-bounds write vulnerabilityDelta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an att…EPSS 2.5%7.8CVE-2020-27289Deltaww cncsoft-b null pointer dereference vulnerabilityDelta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a null pointer dereference issue while processing project files, which may allow an attack…EPSS 1.9%7.8CVE-2020-27291Deltaww cncsoft-b out-of-bounds read vulnerabilityDelta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds read while processing project files, which may allow an atta…EPSS 1.9%

Source: NIST National Vulnerability Database (record CVE-2020-27293), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.