CVE-2025-58319 File Parsing Memory Corruption in CNCSoft-G2

Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process...

Delta Electronics CNCSoft-G2 安全漏洞

Delta Electronics CNCSoft-G2 is a human-machine interface HMI software from Delta Electronics, China. The Delta Electronics CNCSoft-G2 suffers from a stack buffer overflow vulnerability that originates from improperly restricted memory buffer operations and can be exploited by an attacker to...

Delta Electronics CNCSoft-G2 安全漏洞

Delta Electronics CNCSoft-G2 is a human-machine interface HMI software from Delta Electronics, China. The Delta Electronics CNCSoft-G2 suffers from a stack buffer overflow vulnerability that originates from improperly restricted memory buffer operations and can be exploited by an attacker to...

PT-2025-39232

Name of the Vulnerable Software and Affected Versions Delta Electronics CNCSoft-G2 affected versions not specified Description The software does not properly validate user-supplied files. An attacker could execute code within the current process by having a user open a malicious file...

PT-2025-39233

Name of the Vulnerable Software and Affected Versions Delta Electronics CNCSoft-G2 affected versions not specified Description The software does not properly validate user-supplied files. An attacker can execute code within the current process by having a user open a malicious file. Recommendatio...

Delta Electronics COMMGR Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics COMMGR. An attacker must first obtain the ability to compromise a PLC in order to exploit this vulnerability. The specific flaw exists within the handling of packets received from a...

CISA Releases Eight Industrial Control Systems Advisories

CISA released eight Industrial Control Systems ICS advisories on September 16, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-259-01 Schneider Electric Altivar Products, ATVdPAC Module, ILC992 InterLink...

Delta Electronics DIALink

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication. 2. RECOMMENDED PRACTICES CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures. CISA also provides a section for...

Delta Electronics DIALink Directory Traversal Vulnerability (CNVD-2025-22948)

Delta Electronics DIALink is an industrial automation communication gateway from Delta Electronics China. A directory traversal vulnerability exists in Delta Electronics DIALink, which can be exploited by an attacker to cause authentication bypass...

Delta Electronics DIALink Directory Traversal Vulnerability (CNVD-2025-22947)

Delta Electronics DIALink is an industrial automation communication gateway from Delta Electronics China. A directory traversal vulnerability exists in Delta Electronics DIALink, which can be exploited by an attacker to cause authentication bypass...

CVE-2025-58320

Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability...

CVE-2025-58321

Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability...

CVE-2025-58321

Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability...

CVE-2025-58321

Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability...

CVE-2025-58320

Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability...

CVE-2025-58320

Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability...

CVE-2025-58320 DIALink - Directory Traversal Authentication Bypass Vulnerability

Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability...

CVE-2025-58321 DIALink - Directory Traversal Authentication Bypass Vulnerability

Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability...

CVE-2025-58321

Delta Electronics DIALink is affected by CVE-2025-58321: an improper limitation of a pathname to a restricted directory leading to authentication bypass. Documents consistently describe a directory traversal/auth bypass vulnerability in DIALink, with CVSSv3.1 base score 10.0 (CRITICAL) and networ...

PT-2025-37166

Name of the Vulnerable Software and Affected Versions: Delta Electronics DIALink affected versions not specified Description: Delta Electronics DIALink is susceptible to a directory traversal authentication bypass. This allows unauthorized access due to insufficient validation of user-supplied...