What’s Vulnerable › Vulnerabilities
CVE-2021-22660
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.0% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2021-04-27 · updated 2026-06-17
- Weakness: CWE-125
Description
CNCSoft-B Versions 1.0.0.3 and prior is vulnerable to an out-of-bounds read, which may allow an attacker to execute arbitrary code.
Affected products
- Delta Electronics CNCSoft-B: through 1.0.0.3
References
- https://us-cert.cisa.gov/ics/advisories/icsa-21-110-05
- https://www.zerodayinitiative.com/advisories/ZDI-21-445/
- https://www.zerodayinitiative.com/advisories/ZDI-21-446/
- https://www.zerodayinitiative.com/advisories/ZDI-21-509/
- https://us-cert.cisa.gov/ics/advisories/icsa-21-110-05
- https://www.zerodayinitiative.com/advisories/ZDI-21-445/
- https://www.zerodayinitiative.com/advisories/ZDI-21-446/
- https://www.zerodayinitiative.com/advisories/ZDI-21-509/
Get alerted when CVE-2021-22660 or the next vulnerability affects your stack