File Parsing Vulnerability in Delta Electronics CNCSoft-G2
CVE-2025-58317

7.8HIGH

Key Information:

Vendor

Delta Electronics
Status
Cncsoft-g2
Vendor
CVE Published:
24 September 2025

What is CVE-2025-58317?

Delta Electronics CNCSoft-G2 is susceptible to a file parsing vulnerability that fails to validate user-supplied files correctly. This loophole could allow an attacker to execute arbitrary code within the context of the affected process if a user inadvertently opens a malicious file. Proper security measures and updates are essential to mitigate this risk and protect systems from potential exploitation.

Affected Version(s)

CNCSoft-G2 Windows 0 < 2.1.0.34

References

https://filecenter.deltaww.com/news/download/doc/Delta-PC...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Natnael Samson working with Trend Micro Zero Day Initiative
Jason Forbush of CISA
JSON
.
CVE-2025-58317 : File Parsing Vulnerability in Delta Electronics CNCSoft-G2