ICS Advisory: Delta Electronics CNCSoft-B

Summary

The Community Video Surveillance (CVSS) v3 score for this vulnerability is 7.8. The vulnerability is a stack-based buffer overflow in CNCSoft-B, a product of Delta Electronics, which allows an attacker to execute arbitrary code. The affected products are all versions of CNCSoft-B prior to 1.0.0.4. Delta recommends updating to the latest version, while CISA recommends minimizing network exposure, isolating control systems, and using secure remote access methods. This vulnerability is not exploitable remotely and no public exploitation has been reported.