Lucene search

IcscertCVE-2024-39881

HistoryJul 09, 2024 - 10:15 p.m.

CVE-2024-39881

2024-07-0922:15:02

CWE-787

icscert

web.nvd.nist.gov

delta electronics

cncsoft-g2

validation

memory corruption

code execution

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS4

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

ACTIVE

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N

AI Score

6.8

Confidence

High

EPSS

0.002

Percentile

55.4%

JSON

Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a memory corruption condition. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current process.

Affected configurations

Nvd

Node

deltawwcncsoft-g2Match2.0.0.5

VendorProductVersionCPE
deltawwcncsoft-g22.0.0.5cpe:2.3:a:deltaww:cncsoft-g2:2.0.0.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
deltaww	cncsoft-g2	2.0.0.5	cpe:2.3:a:deltaww:cncsoft-g2:2.0.0.5:::::::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "CNCSoft-G2",
    "vendor": "Delta Electronics",
    "versions": [
      {
        "status": "affected",
        "version": "2.0.0.5"
      }
    ]
  }
]

References

www.cisa.gov/news-events/ics-advisories/icsa-24-191-01

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS4

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

ACTIVE

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N

AI Score

6.8

Confidence

High

EPSS

0.002

Percentile

55.4%

JSON

Related for CVE-2024-39881