Skip to content
OpenAdvisories
High ICSA-25-063-06 1 CVE

Delta Electronics CNCSoft-G2

Published Mar 4, 2025 · Updated Mar 4, 2025

Vendor: Delta Electronics Product: CNCSoft-G2

Summary

Successful exploitation of this vulnerability could allow an attacker to execute code remotely.

Vulnerabilities 1

  • High 8.4
    CVE-2025-22881

    Heap-based Buffer Overflow in CNCSoft-G2

    Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to exec…

    Delta Electronics CNCSoft-G2 ICS / OT

Revision history

  1. #1

    Initial Publication

References