Skip to content
OpenAdvisories
High ICSA-23-157-01 3 CVEs

Delta Electronics CNCSoft-B DOPSoft

Published Jun 6, 2023 · Updated Sep 7, 2023 · Revision 2

Vendor: Delta Electronics Product: CNCSoft-B DOPSoft

Summary

Successful exploitation of these vulnerabilities could allow an attacker to exploit a buffer overflow condition and remotely execute arbitrary code.

Vulnerabilities 3

  • High 7.8
    CVE-2023-24014

    Delta Electronics CNCSoft-B DOPSoft Heap-based buffer overflow

    Delta Electronics' CNCSoft-B DOPSoft versions 1.0.0.4 and prior are vulnerable to heap-based buffer overflow, which could allow an attacker to execute arbitrary code.

    Delta Electronics CNCSoft-B DOPSoft ICS / OT
  • High 7.8
    CVE-2023-25177

    Delta Electronics CNCSoft-B DOPSoft Stack-based buffer overflow

    Delta Electronics' CNCSoft-B DOPSoft versions 1.0.0.4 and prior are vulnerable to stack-based buffer overflow, which could allow an attacker to execute arbitrary code.

    Delta Electronics CNCSoft-B DOPSoft ICS / OT
  • High 7.8
    CVE-2023-4685

    CVE-2023-4685

    Delta Electronics' CNCSoft-B version 1.0.0.4 and DOPSoft versions 4.0.0.82 and prior are vulnerable to stack-based buffer overflow, which could allow an attacker to execute arbitrary code.

    Delta Industrial Automation CNCSoft-B DOPSoft

Revision history

  1. #2

    Update A - Changes to affected products and mitigations

  2. #1

    Initial Publication

References