Delta Electronics Diascreen vulnerabilities
14 vulnerabilities
Known vulnerabilities in Delta Electronics Diascreen, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-32969delta electronicsdiascreen+1
EPSS score1.22%
Delta Electronics DIAScreen versions prior to 1.1.0 are vulnerable to an out-of-bounds write condition, which may result in a system crash or allow an attacker to remotely execute arbitrary code.CVE-2021-32965delta electronicsdiascreen+1EPSS score1.22%
Delta Electronics DIAScreen versions prior to 1.1.0 are vulnerable to type confusion, which may allow an attacker to remotely execute arbitrary code.CVE-2025-59300delta electronicsdiascreen+1EPSS score0.19%
Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.CVE-2025-59298delta electronicsdiascreen+1EPSS score0.16%
Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.CVE-2025-59297delta electronicsdiascreen+1EPSS score0.16%
Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.CVE-2025-59299delta electronicsdiascreen+1EPSS score0.16%
Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.CVE-2024-47131delta electronicsdiascreen+1EPSS score0.30%
If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetObjectInfo can be exploited, allowing the attacker to remotely execute arbitrary code.CVE-2024-39354delta electronicsdiascreen+1EPSS score0.30%
If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in CEtherIPTagItem can be exploited, allowing the attacker to remotely execute arbitrary code.CVE-2024-39605delta electronicsdiascreen+1EPSS score2.91%
If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetParameter can be exploited, allowing the attacker to remotely execute arbitrary code.CVE-2024-7502delta electronicsdiascreen+1EPSS score0.42%
A crafted DPA file could force Delta Electronics DIAScreen to overflow a stack-based buffer, which could allow an attacker to execute arbitrary code.CVE-2023-0251delta electronicsdiascreen+1EPSS score0.30%
Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to a buffer overflow through improper restrictions of operations within memory, which could allow an attacker to remotely execute arbitrary code.CVE-2023-0249delta electronicsdiascreen+1EPSS score0.25%
Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to out-of-bounds write, which may allow an attacker to remotely execute arbitrary code.CVE-2023-0250delta electronicsdiascreen+1EPSS score2.00%
Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to a stack-based buffer overflow, which could allow an attacker to remotely execute arbitrary code.CVE-2023-5068delta electronicsdiascreen+1EPSS score0.23%
Delta Electronics DIAScreen may write past the end of an allocated
buffer while parsing a specially crafted input file. This could allow an
attacker to execute code in the context of the current process.