Delta Electronics Diascreen vulnerabilities

14 vulnerabilities

Known vulnerabilities in Delta Electronics Diascreen, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2021-32969delta electronicsdiascreen+1
EPSS score
1.22%
Delta Electronics DIAScreen versions prior to 1.1.0 are vulnerable to an out-of-bounds write condition, which may result in a system crash or allow an attacker to remotely execute arbitrary code.
7.8CVE-2021-32965delta electronicsdiascreen+1
EPSS score
1.22%
Delta Electronics DIAScreen versions prior to 1.1.0 are vulnerable to type confusion, which may allow an attacker to remotely execute arbitrary code.
7.8CVE-2025-59300delta electronicsdiascreen+1
EPSS score
0.19%
Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.
7.8CVE-2025-59298delta electronicsdiascreen+1
EPSS score
0.16%
Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.
7.8CVE-2025-59297delta electronicsdiascreen+1
EPSS score
0.16%
Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.
7.8CVE-2025-59299delta electronicsdiascreen+1
EPSS score
0.16%
Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.
8.4CVE-2024-47131delta electronicsdiascreen+1
EPSS score
0.30%
If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetObjectInfo can be exploited, allowing the attacker to remotely execute arbitrary code.
8.4CVE-2024-39354delta electronicsdiascreen+1
EPSS score
0.30%
If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in CEtherIPTagItem can be exploited, allowing the attacker to remotely execute arbitrary code.
8.4CVE-2024-39605delta electronicsdiascreen+1
EPSS score
2.91%
If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetParameter can be exploited, allowing the attacker to remotely execute arbitrary code.
8.5CVE-2024-7502delta electronicsdiascreen+1
EPSS score
0.42%
A crafted DPA file could force Delta Electronics DIAScreen to overflow a stack-based buffer, which could allow an attacker to execute arbitrary code.
7.8CVE-2023-0251delta electronicsdiascreen+1
EPSS score
0.30%
Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to a buffer overflow through improper restrictions of operations within memory, which could allow an attacker to remotely execute arbitrary code.
7.8CVE-2023-0249delta electronicsdiascreen+1
EPSS score
0.25%
Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to out-of-bounds write, which may allow an attacker to remotely execute arbitrary code.
7.8CVE-2023-0250delta electronicsdiascreen+1
EPSS score
2.00%
Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to a stack-based buffer overflow, which could allow an attacker to remotely execute arbitrary code.
7.8CVE-2023-5068delta electronicsdiascreen+1
EPSS score
0.23%
Delta Electronics DIAScreen may write past the end of an allocated buffer while parsing a specially crafted input file. This could allow an attacker to execute code in the context of the current process.