CVE-2024-47962

Summary

CVE-2024-47962 is a vulnerability affecting Delta Electronics CNCSoft-G2 software. The issue lies in the lack of sufficient validation for the length of user-supplied data before it is copied to a fixed-length stack-based buffer. By manipulating an insider into visiting a specially crafted page or opening a malicious file, an attacker can exploit this vulnerability to execute unauthorized code in the context of the affected process. This vulnerability poses a significant risk for insider threats and should be addressed promptly through software updates or patches.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.