ZDI-24-1386: Delta Electronics CNCSoft-G2 DPAX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics CNCSoft-G2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-47963.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-1386?
The vulnerability ZDI-24-1386 has a critical severity rating due to its potential for remote code execution.
How do I fix ZDI-24-1386?
To fix ZDI-24-1386, apply the latest security patches provided by Delta Electronics for CNCSoft-G2.
Who is affected by ZDI-24-1386?
Affected users include those running vulnerable installations of Delta Electronics CNCSoft-G2.
What is the nature of the attack for ZDI-24-1386?
The attack exploiting ZDI-24-1386 requires user interaction, such as visiting a malicious webpage or opening a harmful file.
What can attackers achieve with ZDI-24-1386?
Attackers can execute arbitrary code on the affected systems through the exploitation of ZDI-24-1386.