2 lines
2.3 KiB
JSON
2 lines
2.3 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"CNCSoft-G2","vendor":"deltaww","versions":[{"lessThan":"2.1.0.39","status":"affected","version":"0","versionType":"custom"}]}],"source":"759f5e80-c8e1-4224-bead-956d7b33c98b"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:deltaww:cncsoft-g2:*:*:*:*:*:*:*:*","matchCriteriaId":"12BCFE31-54C7-4A39-872D-6D44AA8BF082","versionEndExcluding":"2.1.0.39","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process."},{"lang":"es","value":"Delta Electronics CNCSoft-G2 carece de validación adecuada del archivo proporcionado por el usuario. Si un usuario abre un archivo malicioso, un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del proceso actual."}],"id":"CVE-2026-3094","lastModified":"2026-06-17T10:43:02.160","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"759f5e80-c8e1-4224-bead-956d7b33c98b","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-3094","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-03-04T21:26:47.717714Z","version":"2.0.3"}}]},"published":"2026-03-04T09:15:58.457","references":[{"source":"759f5e80-c8e1-4224-bead-956d7b33c98b","tags":["Vendor Advisory"],"url":"https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00004_CNCSoft-G2_File%20Parsing%20Out-Of-Bounds%20Write.pdf"}],"sourceIdentifier":"759f5e80-c8e1-4224-bead-956d7b33c98b","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-787"}],"source":"759f5e80-c8e1-4224-bead-956d7b33c98b","type":"Secondary"}]}
|