Skip to content
OpenAdvisories
High ICSA-24-284-21 5 CVEs

Delta Electronics CNCSoft-G2

Published Oct 10, 2024 · Updated Oct 10, 2024

Vendor: Delta Electronics Product: CNCSoft-G2

Summary

Successful exploitation of these vulnerabilities could allow an attacker to execute code remotely.

Vulnerabilities 5

  • High 8.4
    CVE-2024-47962

    Stack-based Buffer Overflow vulnerability in Delta Electronics CNCSoft-G2

    Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can manipulate an insider to visit a malicious page or file to leverage this vulnerability to execut…

    Delta Electronics CNCSoft-G2 ICS / OT
  • High 8.4
    CVE-2024-47963

    Out-of-bounds Write vulnerability in Delta Electronics CNCSoft-G2

    Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerability to execute code in t…

    Delta Electronics CNCSoft-G2 ICS / OT
  • High 8.4
    CVE-2024-47964

    Heap-based Buffer Overflow vulnerability in Delta Electronics CNCSoft-G2

    Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerability to execute code…

    Delta Electronics CNCSoft-G2 ICS / OT
  • High 8.4
    CVE-2024-47965

    Out-of-bounds Read vulnerability in Delta Electronics CNCSoft-G2

    Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerability to execute code in th…

    Delta Electronics CNCSoft-G2 ICS / OT
  • High 8.4
    CVE-2024-47966

    Use of Uninitialized Variable vulnerability in Delta Electronics CNCSoft-G2

    Delta Electronics CNCSoft-G2 lacks proper initialization of memory prior to accessing it. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process.

    Delta Electronics CNCSoft-G2 ICS / OT

Revision history

  1. #1

    Initial Publication

References