QwikSec

Security Database

CVE

CWE

Training

CVE-2024-47962

Published: Oct 10, 2024

Modified: Oct 10, 2024

PUBLISHED

Description

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can manipulate an insider to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process.

Vendor	Product	Versions
Delta Electronics	CNCSoft-G2	affected `2.1.0.10`

Weaknesses (CWE)

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-284-21

government-resource

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.