Details of VAR-202506-0683

ID

VAR-202506-0683

CVE

CVE-2025-47728

TITLE

Delta Electronics CNCSoft-G2 DPAX File Parsing Memory Corruption Remote Code Execution Vulnerability

Trust: 0.7

sources: ZDI: ZDI-25-411

DESCRIPTION

Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics CNCSoft-G2. Delta Electronics CNCSoft-G2 is a human-machine interface (HMI) software from Delta Electronics, a Chinese company. Delta Electronics CNCSoft-G2 V2.1.0.20 and earlier versions have a buffer overflow vulnerability

Trust: 2.07

sources: NVD: CVE-2025-47728 // ZDI: ZDI-25-411 // CNVD: CNVD-2025-12362

IOT TAXONOMY

category:

['ICS']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2025-12362

AFFECTED PRODUCTS

vendor:	delta	model:	cncsoft-g2	scope:	-	version:	-	Trust: 0.7
vendor:	delta	model:	electronics cncsoft-g2	scope:	lte	version:	<=v2.1.0.20	Trust: 0.6

sources: ZDI: ZDI-25-411 // CNVD: CNVD-2025-12362

CVSS

SEVERITY

CVSSV2

CVSSV3

759f5e80-c8e1-4224-bead-956d7b33c98b:	CVE-2025-47728
value:	HIGH
Trust: 1.0
ZDI:	CVE-2025-47728
value:	HIGH
Trust: 0.7
CNVD:	CNVD-2025-12362
value:	MEDIUM
Trust: 0.6

CNVD:	CNVD-2025-12362
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:L/AC:L/AU:S/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.1
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

ZDI:	CVE-2025-47728
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	5.9
version:	3.0
Trust: 0.7

sources: ZDI: ZDI-25-411 // CNVD: CNVD-2025-12362 // NVD: CVE-2025-47728

PROBLEMTYPE DATA

problemtype:

CWE-787

Trust: 1.0

sources: NVD: CVE-2025-47728

PATCH

title:	Delta Electronics has issued an update to correct this vulnerability.	url:	https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00007_CNCSoft-G2%20-%20File%20Parsing%20Memory%20Corruption.pdf	Trust: 0.7
title:	Patch for Delta Electronics CNCSoft-G2 Buffer Overflow Vulnerability (CNVD-2025-12362)	url:	https://www.cnvd.org.cn/patchInfo/show/697051	Trust: 0.6

sources: ZDI: ZDI-25-411 // CNVD: CNVD-2025-12362

EXTERNAL IDS

db:	NVD	id:	CVE-2025-47728	Trust: 2.3
db:	ZDI_CAN	id:	ZDI-CAN-26167	Trust: 0.7
db:	ZDI	id:	ZDI-25-411	Trust: 0.7
db:	CNVD	id:	CNVD-2025-12362	Trust: 0.6

sources: ZDI: ZDI-25-411 // CNVD: CNVD-2025-12362 // NVD: CVE-2025-47728

REFERENCES

url:	https://filecenter.deltaww.com/news/download/doc/delta-pcsa-2025-00007_cncsoft-g2%20-%20file%20parsing%20memory%20corruption.pdf	Trust: 1.7
url:	https://nvd.nist.gov/vuln/detail/cve-2025-47728	Trust: 0.6

sources: ZDI: ZDI-25-411 // CNVD: CNVD-2025-12362 // NVD: CVE-2025-47728

CREDITS

Natnael Samson (@NattiSamson)

Trust: 0.7

sources: ZDI: ZDI-25-411

SOURCES

db:	ZDI	id:	ZDI-25-411
db:	CNVD	id:	CNVD-2025-12362
db:	NVD	id:	CVE-2025-47728

LAST UPDATE DATE

2025-06-21T23:35:01.255000+00:00

SOURCES UPDATE DATE

db:	ZDI	id:	ZDI-25-411	date:	2025-06-19T00:00:00
db:	CNVD	id:	CNVD-2025-12362	date:	2025-06-13T00:00:00
db:	NVD	id:	CVE-2025-47728	date:	2025-06-04T14:54:33.783

SOURCES RELEASE DATE

db:	ZDI	id:	ZDI-25-411	date:	2025-06-19T00:00:00
db:	CNVD	id:	CNVD-2025-12362	date:	2025-06-13T00:00:00
db:	NVD	id:	CVE-2025-47728	date:	2025-06-04T08:15:22.453