CVE-2024-47965

Publication date

2024-10-10 17:18:01

Family

icscert

State

PUBLISHED

Description

Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process.