CVE-2024-47966: Use of Uninitialized Variable vulnerability in Delta Electronics CNCSoft-G2

Published Oct 10, 2024

Updated

Delta Electronics CNCSoft-G2 lacks proper initialization of memory prior to accessing it. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process.

Affected Software

1 affected component

Deltaww Cncsoft-g2=2.1.0.10

Remediation

Information

Delta Electronics recommends users update to CNCSoft-G2 v2.1.0.16 https://downloadcenter.deltaww.com/en-US/DownloadCenter or later.

Event History

Oct 10, 2024

CVE Published

via MITRE·05:18 PM

Data Sourced

via MITRE·05:18 PM

RemedyDescriptionWeakness

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-47966?

The severity of CVE-2024-47966 is considered high due to its potential to allow code execution in the context of the current process.

How do I fix CVE-2024-47966?

Fixing CVE-2024-47966 involves updating Delta Electronics CNCSoft-G2 to the latest version where the vulnerability is addressed.

What type of attack does CVE-2024-47966 enable?

CVE-2024-47966 enables attackers to execute code by manipulating users into visiting malicious pages or files.

Is CVE-2024-47966 present in earlier versions of CNCSoft-G2?

Yes, CVE-2024-47966 is specific to version 2.1.0.10 and may be present in earlier versions of CNCSoft-G2.

What should users of Delta Electronics CNCSoft-G2 do regarding CVE-2024-47966?

Users of Delta Electronics CNCSoft-G2 should immediately apply available patches or updates to protect against CVE-2024-47966.