ZDI-CAN-19334: ZDI-23-803: Delta Electronics CNCSoft-B DOPSoft DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics CNCSoft-B. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-19334?
The severity of ZDI-CAN-19334 is considered high due to its potential for remote code execution by attackers.
How do I fix ZDI-CAN-19334?
To fix ZDI-CAN-19334, update your Delta Electronics CNCSoft-B or DOPSoft software to the latest version as recommended by the vendor.
What types of attacks can ZDI-CAN-19334 enable?
ZDI-CAN-19334 can enable remote attackers to execute arbitrary code if the user interacts with a malicious page or file.
Is user interaction required to exploit ZDI-CAN-19334?
Yes, user interaction is required to exploit ZDI-CAN-19334 as the target must visit a malicious page or open a malicious file.
Which software is affected by ZDI-CAN-19334?
ZDI-CAN-19334 affects Delta Electronics CNCSoft-B and DOPSoft installations.