CVE-2024-1595 HIGH

CVE-2024-1595: Delta Electronics CNCSoft-B DOPSoft Uncontrolled Search Path Element

Vendor Delta Electronics

Product CNCSoft-B v1.0.0.4 DOPSoft

Weakness CWE-427

Published February 29, 2024

Last update August 22, 2024

View on NVD All CVEs

CVSS base score

7.8/10

Attack vector Local

Attack complexity Low

Privileges required None

User interaction Required

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Delta Electronics CNCSoft-B DOPSoft prior to v4.0.0.82 insecurely loads libraries, which may allow an attacker to use DLL hijacking and take over the system where the software is installed.

Key dates

02Disclosure timeline

February 29, 2024 CVE published

August 22, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-1595 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/427.html

Related vulnerabilities

04Related CVE

CVE-2026-7870 IBM i is Affected by Privilege Escalation [] CVE-2026-47274 pam_usb: Uncontrolled search path in pam_usb tools allows privilege escalation via PATH manipulation CVE-2026-11879 Arbitrary code execution in MobaXterm Personal Edition (Portable) CVE-2026-44358 Espressif Shared GitHub DangerJS: Untrusted Search Path in DangerJS Action Entrypoint CVE-2026-40031 MemProcFS < 5.17 DLL/Shared Library Hijacking