CVE-2024-1595

Delta Electronics CNCSoft-B DOPSoft prior to v4.0.0.82 insecurely loads libraries, which may allow an attacker to use DLL hijacking and take over the system where the software is installed...

CVE-2024-1595

Delta Electronics CNCSoft-B DOPSoft prior to v4.0.0.82 insecurely loads libraries, which may allow an attacker to use DLL hijacking and take over the system where the software is installed...

Code injection

Delta Electronics CNCSoft-B DOPSoft prior to v4.0.0.82 insecurely loads libraries, which may allow an attacker to use DLL hijacking and take over the system where the software is installed...

CVE-2024-1595 Delta Electronics CNCSoft-B DOPSoft Uncontrolled Search Path Element

Delta Electronics CNCSoft-B DOPSoft prior to v4.0.0.82 insecurely loads libraries, which may allow an attacker to use DLL hijacking and take over the system where the software is installed...

CVE-2024-1595 Delta Electronics CNCSoft-B DOPSoft Uncontrolled Search Path Element

Delta Electronics CNCSoft-B DOPSoft prior to v4.0.0.82 insecurely loads libraries, which may allow an attacker to use DLL hijacking and take over the system where the software is installed...

CVE-2024-1595

Delta Electronics CNCSoft-B DOPSoft prior to v4.0.0.82 is affected by an uncontrolled search path element vulnerability due to insecure DLL loading, enabling DLL hijacking and potential code execution in the context of the affected process. ZDI documents remote code execution with user interactio...

CISA Releases Two Industrial Control Systems Advisories

CISA released two Industrial Control Systems ICS advisories on February 29, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-060-01 Delta Electronics CNCSoft-B ICSMA-24-060-01 MicroDicom DICOM Viewer CISA...

Delta Electronics CNCSoft-B

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Low attack complexity Vendor : Delta Electronics Equipment : CNCSoft-B Vulnerability : Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code. 3...

Delta Electronics CNCSoft Code Issue Vulnerability

Delta Electronics CNCSoft is a CNC machine simulation system software from Delta Electronics, Taiwan, China. The software provides high-performance motion control, rich human-machine interface functions, user-friendly operation, high stability to meet the needs of high-speed cutting, and good...

TOTOLINK X5000R Denial of Service Vulnerability

TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. The TOTOLINK X5000R suffers from a denial of service vulnerability that can be exploited by attackers to cause a denial of service...

PT-2024-18393 · Lg · Webos

Name of the Vulnerable Software and Affected Versions: webOS of LG Signage affected versions not specified Description: This issue allows remote attackers to traverse the directory on the affected webOS of LG Signage. Recommendations: At the moment, there is no information about a newer version...

TOTOLINK LR1200GB Buffer Overflow Vulnerability

The TOTOLINK LR1200GB is a wireless dual-band 4G LTE router from China's Gion Electronics TOTOLINK. The TOTOLINK LR1200GB suffers from a buffer overflow vulnerability that originates from the parameter httphost in the file /cgi-bin/cstecgi.cgi that can lead to a stack-based buffer overflow, and n...

Delta Electronics CNCSoft-B DOPSoft

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Low attack complexity Vendor : Delta Electronics Equipment : CNCSoft-B DOPSoft Vulnerability : Uncontrolled Search Path Element 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to achieve remote code...

PT-2024-1947 · Delta Electronics · Cncsoft-B Dopsoft

Name of the Vulnerable Software and Affected Versions: Delta Electronics CNCSoft-B DOPSoft versions prior to 4.0.0.82 Description: The issue is related to the insecure loading of libraries, which may allow an attacker to use DLL hijacking and take over the system where the software is installed...

Delta Electronics DIAEnergie Hard-coded JWT Key (CVE-2022-3214)

Binary data deltaelectronicsdiaenergiecve-2022-3214.nbin...

TOTOLINK A3300R setPortForwardRules Method Command Injection Vulnerability

TOTOLINK A3300R is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK A3300R version V17.0.0cu.557B20221024, which stems from the enable parameter of the setPortForwardRules method failing to correctly filter construct command specia...

TOTOLINK A3300R setParentalRules method command injection vulnerability

The TOTOLINK A3300R is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK A3300R version V17.0.0cu.557B20221024, which stems from the enable parameter of the setParentalRules method failing to correctly filter construct command speci...

The software for PLC programming by Delta Electronics WPLSoft has a vulnerability related to copying buffers without checking the size of the input data. This allows an intruder to execute arbitrary code.

The vulnerability of Delta Electronics WPLSoft PLC programming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created DVP file...

The vulnerability of Delta Electronics’ ISPSoft programming software for PLCs lies in buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of Delta Electronics’ ISPSoft programming software for PLCs lies in buffer overflows in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created DVP file...

TOTOLINK T8 Code Issue Vulnerability

TOTOLINK T8 is a wireless dual-band router from China's Gion Electronics that supports gigabit networks. TOTOLINK T8 has a code issue vulnerability that originates from certain unknown functions in the file /cgi-bin/cstecgi.cgi, no details of the vulnerability are provided at this time...