Delta Industrial Automation CNCSoft ScreenEditor

A buffer overflow in ScreenEditor could allow an attacker to run arbitrary code on a machine running the software, potentially compromising the engineering workstation and any control systems it manages. In a manufacturing environment, this could lead to unauthorized modification of industrial control logic or process interruption.

Manufacturing facilities and discrete process industries that use Delta Electronics ScreenEditor for PLC and motion control programming. Engineering teams, commissioning contractors, and maintenance personnel who open project files or design files in ScreenEditor are at direct risk. Any production line or machine controlled by a PLC configured with ScreenEditor could be indirectly affected if the engineering workstation is compromised.

An attacker would trick a user into opening a malicious file (drawing, configuration, or project file) in ScreenEditor. When the application parses the file, the buffer overflow is triggered, allowing the attacker to execute code with the privileges of the user running ScreenEditor. If ScreenEditor runs on an engineering workstation with access to PLCs or control networks, the attacker gains a foothold to further compromise industrial systems.