What’s Vulnerable › Vulnerabilities

CVE-2024-1595: Delta Electronics CNCSoft-B DOPSoft Uncontrolled Search Path Element

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-02-29 · updated 2026-06-17
• Weakness: CWE-427

Description

Delta Electronics CNCSoft-B DOPSoft prior to v4.0.0.82 insecurely loads libraries, which may allow an attacker to use DLL hijacking and take over the system where the software is installed.

Affected products

• Delta Electronics CNCSoft-B DOPSoft: through 1.0.0.4
• Delta Electronics DOPSoft: before 4.0.0.94 — fixed in 4.0.0.94

How to fix

Upgrade to a fixed version: Delta Electronics DOPSoft 4.0.0.94. Check the vendor advisory for mitigations.

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-24-053-01
• https://www.cisa.gov/news-events/ics-advisories/icsa-24-053-01

Get alerted when CVE-2024-1595 or the next vulnerability affects your stack