Delta Electronics CNCSoft-G2 DOPSoft DPAX

View CSAF

1. EXECUTIVE SUMMARY

• CVSS v4 8.5


• ATTENTION: Low attack complexity


• Vendor: Delta Electronics


• Equipment: CNCSoft-G2 DOPSoft


• Vulnerability: Stack-based Buffer Overflow

2. RISK EVALUATION

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code.

3. TECHNICAL DETAILS

3.1 AFFECTED PRODUCTS

The following versions of Delta Electronics CNCSoft-G2, a Human-Machine Interface (HMI) software, are affected:

• CNCSoft-G2: Versions 2.0.0.5 (with DOPSoft v5.0.0.93) and prior

3.2 Vulnerability Overview

3.2.1 STACK-BASED BUFFER OVERFLOW CWE-121

Delta Electronics …

arbitrary code attack attacker attention buffer buffer overflow code complexity csaf cvss delta delta electronics dopsoft electronics equipment evaluation executive exploitation hmi human interface low machine overflow products risk stack technical technical details vendor vulnerability