CVE-2023-4685

Name of the Vulnerable Software and Affected Versions CNCSoft-B version 1.0.0.4 DOPSoft versions 4.0.0.82 and prior

Description The issue is caused by a stack-based buffer overflow in Delta Electronics' CNCSoft-B and DOPSoft, which could allow an attacker to execute arbitrary code. This overflow occurs during the parsing of DPA files.

Recommendations For CNCSoft-B version 1.0.0.4, update to a version that fixes the stack-based buffer overflow issue. For DOPSoft versions 4.0.0.82 and prior, update to a version that fixes the stack-based buffer overflow issue. As a temporary workaround, consider restricting access to the DPA file parsing functionality until a patch is available.