CVE-2024-39880
July 9, 2024, 10:15 p.m.
Tags
Product(s) Impacted
Delta Electronics CNCSoft-G2
Description
Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current process.
Weaknesses
CWE-121
Stack-based Buffer Overflow
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
CWE ID: 121Date
Published: July 9, 2024, 10:15 p.m.
Last Modified: July 9, 2024, 10:15 p.m.
Status : Received
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
ics-cert@hq.dhs.gov
References
ics-cert@hq.dhs.gov