Skip to content
OpenAdvisories
High ICSA-24-121-01 2 CVEs

Delta Electronics CNCSoft-G2 DOPSoft (Update A)

Published Apr 30, 2024 · Updated Oct 16, 2025 · Revision 2

Vendor: Delta Electronics Product: CNCSoft-G2

Summary

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code.

Vulnerabilities 2

  • High 7.8
    CVE-2024-4192

    Stack-based Buffer Overflow vulnerability in Delta Electronics CNCSoft-G2 DOPSoft

    Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.

    Delta Electronics CNCSoft-G2 DOPSoft ICS / OT
  • High 7.8
    CVE-2025-58319

    File Parsing Memory Corruption in CNCSoft-G2

    Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.

    Delta Electronics CNCSoft-G2 ICS / OT

Revision history

  1. #2

    Update A - Modified affected products, vulnerability overview, and mitigations

  2. #1

    Initial Publication

References