Delta Electronics CNCSoft-G2 Heap-Based Buffer Overflow Remote Code Execution Vulnerability

A heap-based buffer overflow vulnerability has been identified in Delta Electronics CNCSoft-G2, specifically in versions through 2.1.0.10. The issue arises from improper validation of user-supplied data length before it is copied to a fixed-length heap-based buffer. This vulnerability can be exploited to execute code in the context of the current process, potentially leading to unauthorized actions or access within the application.

Impact

Exploitation of this vulnerability allows for remote code execution in the context of the current process.

Remediation

Users are advised to download and update to version 2.1.0.20 or later.