Delta Electronics CNCSoft-B DOPSoft ICSA-23-157-01 Buffer Overflow Vulnerabilities

Description

Delta Electronics' DOPSoft versions prior to v4.0.0.82, a component of CNCSoft-B 1.0.0.4, are vulnerable to stack-based buffer overflow and heap-based buffer overflow, which could allow an attacker to execute arbitrary code

Affected Applications

Delta Electronics CNCSoft-B

CVE References

CVE-2023-4685 CVE-2023-25177 CVE-2023-24014

Other References

https://www.cisa.gov/uscert/ics/advisories/icsa-23-157-01