Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.
References
Configurations
History
11 Jul 2025, 17:52
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:deltaww:cncsoft-g2:*:*:*:*:*:*:*:* | |
| First Time |
Deltaww cncsoft-g2
Deltaww |
|
| References | () https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00007_CNCSoft-G2%20-%20File%20Parsing%20Memory%20Corruption.pdf - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.3 |
04 Jun 2025, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-06-04 08:15
Updated : 2025-07-11 17:52
NVD link : CVE-2025-47728
Mitre link : CVE-2025-47728
JSON object : View
Products Affected
deltaww
- cncsoft-g2
CWE
No CWE.