What is CVE-2024-1941?

CVE-2024-1941 is a high-severity stack-based buffer overflow vulnerability affecting Delta Electronics CNCSoft-B software versions 1.0.0.4 and prior. While the specific types of systems impacted are not explicitly mentioned, it can be inferred that industrial control systems ICS utilizing Delta Electronics CNCSoft-B software may be at risk.

Who is impacted by CVE-2024-1941?

The CVE-2024-1941 vulnerability affects users of Delta Electronics CNCSoft-B software versions 1.0.0.4 and prior. This issue is a stack-based buffer overflow, which could potentially allow an attacker to execute arbitrary code on affected systems. In simpler terms, this vulnerability poses a risk to those using the mentioned software versions, as it could give unauthorized individuals the ability to run harmful code on their systems.

What should I do if I’m affected?

If you're affected by the CVE-2024-1941 vulnerability, it's important to take action to protect your systems. Update to CNCSoft-B V 1.0.0.4 or later.Minimize network exposure for control system devices. Isolate control system networks from business networks.Use secure methods for remote access, such as VPNs.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2024-1941 vulnerability, a stack-based buffer overflow in Delta Electronics CNCSoft-B software, is not listed in CISA's Known Exploited Vulnerabilities Catalog.

Weakness Enumeration

The weakness enumeration for this vulnerability is categorized as CWE-121, which is a stack-based buffer overflow issue in Delta Electronics CNCSoft-B software.

Learn More

For a comprehensive understanding of this vulnerability, including its description, severity, technical details, and known affected software configurations, refer to the NVD page or the sources listed below.

• Delta Electronics CNCSoft-B | CISA