Dopsoft vulnerabilities

3 known vulnerabilities in Dopsoft from DeltaWW. 3 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  CNCSoft-B v1.0.0.4 DOPSoft: Uncontrolled Search Path Element

  CVE-2024-1595Feb 29, 2024Delta Electronics

  Delta Electronics CNCSoft-B DOPSoft prior to v4.0.0.82 insecurely loads libraries, which may allow an attacker to use DLL hijacking and take over the system where the software is installed.

• 7.8 High severity

  CNCSoft-B DOPSoft: Out-of-bounds Write

  CVE-2023-4685Sep 7, 2023Delta Industrial Automation

  Delta Electronics' CNCSoft-B version 1.0.0.4 and DOPSoft versions 4.0.0.82 and prior are vulnerable to stack-based buffer overflow, which could allow an attacker to execute arbitrary code.

• 7.8 High severity

  Delta Electronics DOPSoft 2 Improper Input Validation Exploited

  CVE-2021-38406Sep 17, 2021Delta ElectronicsEPSS 76.4%

  Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could result in multiple out-of-bounds write instances. An attacker could leverage this vulnerability to execute code