CVE-2024-47962

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can manipulate an insider to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Oct 10, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-479637.8Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a write past the end of an allocated object.CVE-2024-479647.8Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buCVE-2024-479657.8Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. CVE-2024-479667.8Delta Electronics CNCSoft-G2 lacks proper initialization of memory prior to accessing it. An attacker can manipulate users to visit a maliciCVE-2024-479674.4Improper resource initialization handling in firmware of some Solidigm DC Products may allow an attacker to potentially enable denial of serCVE-2024-479684.4Improper resource shutdown in middle of certain operations on some Solidigm DC Products may allow an attacker to potentially enable denial oCVE-2024-479696.2Improper resource management in firmware of some Solidigm DC Products may allow an attacker to potentially enable denial of service.CVE-2024-47976.1A vulnerability was found in Campcodes Online Laundry Management System 1.0. It has been declared as problematic. This vulnerability affectsCVE-2024-479716.5Improper error handling in firmware of some SSD DC Products may allow an attacker to enable denial of service.CVE-2024-479724.0Improper resource management in firmware of some Solidigm DC Products may allow an attacker to potentially control the performance of the reCVE-2024-479735.1In some Solidigm DC Products, a defect in device overprovisioning may provide information disclosure to an attacker.CVE-2024-479744.4Race condition during resource shutdown in some Solidigm DC Products may allow an attacker to potentially enable denial of service.