CVE-2023-24014

Name of the Vulnerable Software and Affected Versions Delta Electronics' CNCSoft-B DOPSoft versions 1.0.0.4 and prior

Description The issue is related to a heap-based buffer overflow that could allow an attacker to execute arbitrary code. This occurs when processing DPA files, potentially enabling an attacker to execute arbitrary code by opening a specially crafted malicious file or webpage.

Recommendations For versions 1.0.0.4 and prior, consider restricting the processing of DPA files until a patch is available. As a temporary workaround, avoid opening specially crafted files or accessing potentially malicious web pages that could exploit this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.