Vulnerability in Delta Electronics CNCSoft-G2 Allow Manipulation of User-Supplied Data
CVE-2024-47963

7.8HIGH

Key Information:

Vendor
Delta Electronics
Status
Cncsoft-g2
Vendor
CVE Published:
10 October 2024

Summary

Delta Electronics' CNCSoft-G2 is susceptible to a vulnerability resulting from inadequate validation of user-supplied data. This shortcoming allows attackers to exploit the system, potentially leading to unauthorized code execution by tricking users into engaging with a malicious webpage or file. This issue poses significant risks, as it could enable attackers to compromise the integrity of the affected processes and machinery.

Affected Version(s)

CNCSoft-G2 2.1.0.10

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-2...
government-resource

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Bobby Gould, Fritz Sands, and Natnael Samson working with Trend Micro Zero Day Initiative reported these vulnerabilities to CISA.
.