Vulnerability details

CVE-2025-47726

Delta Electronics CNCSoft

Out-of-bounds Write in CNCSoft

CVSS 4.0

7.3High

Official description

Delta Electronics CNCSoft lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.

CVSS scores

Score	Version	Source	Vector
7.3High	4.0	CVEProject cvelistV5 (CNA) (Deltaww)	`CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H`

Affected products

Vendor	Product	Versions	Source
Delta Electronics	CNCSoft	All	CVEProject cvelistV5 (CNA)

References and advisories

https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00006_CNCSoft%20-%20Out-of-bounds%20Write.pdf

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2025-06-04
Last updated: 2025-06-04
State: Published
Assigner (CNA): Deltaww

Exploit prediction (EPSS)

0.26%

Probability of exploitation in 30 days

18.8%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: No
Exploitation: None
Technical impact: Total

Weaknesses (CWE)

CWE-787
Out-of-bounds Write