Delta Electronics CNCSoft

Risk Summary

Successful exploitation of this vulnerability could allow for arbitrary code execution.

CVEs (1)

Remediations

• Delta Electronics has released an updated version of CNCSoft and recommends users install v1.01.31 and later on all affected systems.
• Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the Internet.
• Locate control system networks and remote devices behind firewalls and isolate them from the business network.
• When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing a VPN is only as secure as its connected devices.
• Do not click web links or open unsolicited attachments in email messages.
• Refer to Recognizing and Avoiding Email Scams for more information on avoiding email scams.
• Refer to Avoiding Social Engineering and Phishing Attacks for more information on social engineering attacks.

Affected Vendors

Affected Products (1)

Affected Sectors

Critical Manufacturing