Lucene search
+L

507 matches found

Cvelist
Cvelist
added 2024/07/09 9:25 p.m.21 views

CVE-2024-39883 Heap-based Buffer Overflow in Delta Electronics CNCSoft-G2

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current...

8.4CVSS0.00738EPSS
Exploits0References1
CVE
CVE
added 2024/07/09 9:25 p.m.60 views

CVE-2024-39882

Delta Electronics CNCSoft-G2 is affected by CVE-2024-39882 (and related DPAX parsing flaws) causing an out-of-bounds read that can lead to remote code execution in the context of the current process. The vulnerability arises from insufficient validation when parsing DPAX files and can be triggere...

8.8CVSS8.7AI score0.00697EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/07/09 9:25 p.m.14 views

CVE-2024-39882 Out-of-bounds Read in Delta Electronics CNCSoft-G2

Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current proce...

8.4CVSS7.2AI score0.00697EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/07/09 9:25 p.m.22 views

CVE-2024-39882 Out-of-bounds Read in Delta Electronics CNCSoft-G2

Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current proce...

8.4CVSS0.00697EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/07/09 9:23 p.m.21 views

CVE-2024-39881 Out-of-bounds Write in Delta Electronics CNCSoft-G2

Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a memory corruption condition. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current process...

8.4CVSS0.00697EPSS
Exploits0References1
CVE
CVE
added 2024/07/09 9:23 p.m.58 views

CVE-2024-39881

Delta Electronics CNCSoft-G2 is affected via its DPAX file parsing, where insufficient validation of user-supplied data can cause memory corruption. This can enable remote code execution in the context of the current process when a target visits a malicious page or opens a malicious file. Documen...

8.8CVSS8.9AI score0.00697EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/07/09 9:23 p.m.13 views

CVE-2024-39881 Out-of-bounds Write in Delta Electronics CNCSoft-G2

Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a memory corruption condition. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current process...

8.4CVSS7.2AI score0.00697EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/07/09 9:21 p.m.18 views

CVE-2024-39880 Stack-based Buffer Overflow in Delta Electronics CNCSoft-G2

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the curren...

8.4CVSS7AI score0.00738EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/07/09 9:21 p.m.22 views

CVE-2024-39880 Stack-based Buffer Overflow in Delta Electronics CNCSoft-G2

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the curren...

8.4CVSS0.00738EPSS
Exploits0References1
CVE
CVE
added 2024/07/09 9:21 p.m.73 views

CVE-2024-39880

Delta Electronics CNCSoft-G2 is affected by stack-based buffer overflow in multiple file parsers (DPAX, ALM, CMT) due to insufficient validation of user-supplied data length before copying into fixed-length stack buffers. This can allow remote code execution when a target opens a malicious file o...

8.8CVSS8AI score0.00738EPSS
Exploits0References1Affected Software1
ICS
ICS
added 2024/07/09 6:0 a.m.73 views

Delta Electronics CNCSoft-G2 (Update A)

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.4 ATTENTION : Low attack complexity Vendor : Delta Electronics Equipment : CNCSoft-G2 Vulnerabilities : Stack-based Buffer Overflow, Out-of-bounds Write, Out-of-bounds Read, Heap-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these...

8.8CVSS9.2AI score0.00738EPSS
Exploits0References10
CNNVD
CNNVD
added 2024/07/09 12:0 a.m.8 views

Delta Electronics CNCSoft-G2 缓冲区错误漏洞

Delta Electronics CNCSoft-G2 is a human-machine interface HMI software from Delta Electronics, China. Delta Electronics CNCSoft-G2 suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute code in the context of the current process...

8.8CVSS7.4AI score0.00697EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/07/09 12:0 a.m.6 views

Delta Electronics CNCSoft-G2 安全漏洞

Delta Electronics CNCSoft-G2 is a human-machine interface HMI software from Delta Electronics, China. Delta Electronics CNCSoft-G2 suffers from a buffer overflow vulnerability that can be exploited by a remote attacker to execute code in the context of the current process...

8.8CVSS7.7AI score0.00738EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/07/09 12:0 a.m.4 views

PT-2024-28709 · Delta Electronics · Cncsoft-G2

Name of the Vulnerable Software and Affected Versions: Delta Electronics CNCSoft-G2 affected versions not specified Description: The issue is related to a lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. This can be exploited i...

8.8CVSS7.5AI score0.00738EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2024/07/09 12:0 a.m.8 views

PT-2024-28707 · Delta Electronics · Cncsoft-G2

Name of the Vulnerable Software and Affected Versions: Delta Electronics CNCSoft-G2 affected versions not specified Description: The issue is related to a lack of proper validation of user-supplied data, which can result in a memory corruption condition. This can be exploited if a target visits a...

8.8CVSS7.3AI score0.00697EPSS
Exploits0References11
CNNVD
CNNVD
added 2024/07/09 12:0 a.m.4 views

Delta Electronics CNCSoft-G2 缓冲区错误漏洞

Delta Electronics CNCSoft-G2 is a human-machine interface HMI software from Delta Electronics, China. Delta Electronics CNCSoft-G2 suffers from an out-of-bounds read vulnerability that can be exploited by a remote attacker to execute code in the context of the current process...

8.8CVSS7.3AI score0.00697EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/07/09 12:0 a.m.4 views

PT-2024-28708 · Delta Electronics · Cncsoft-G2

Name of the Vulnerable Software and Affected Versions: Delta Electronics CNCSoft-G2 affected versions not specified Description: The issue is related to a lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. This can be leveraged by an...

8.8CVSS7.4AI score0.00697EPSS
Exploits0References7
CNNVD
CNNVD
added 2024/07/09 12:0 a.m.5 views

Delta Electronics CNCSoft-G2 安全漏洞

Delta Electronics CNCSoft-G2 is a human-machine interface HMI software from Delta Electronics, China. The Delta Electronics CNCSoft-G2 suffers from a buffer overflow vulnerability that can be exploited by an attacker to execute code in the context of the current process...

8.8CVSS7.6AI score0.00738EPSS
Exploits0References2
Wiz blog
Wiz blog
added 2024/07/02 6:8 p.m.13 views

Wiz Ranked #1 CNAPP and CSPM by G2

Wiz was named the leader in two Summer 2024 Grid Reports, based on independent customer reviews...

7.2AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2024/06/12 12:0 a.m.12 views

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics CNCSoft-G2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.7AI score0.00322EPSS
Exploits0References1
Rows per page
Query Builder