Delta Electronics vulnerabilities, page 2
226 vulnerabilities
Known vulnerabilities in Delta Electronics products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 37 products.
CVE-2021-38420delta electronicsdialink+1
EPSS score0.23%
Delta Electronics DIALink versions 1.2.4.0 and prior default permissions give extensive permissions to low-privileged user accounts, which may allow an attacker to modify the installation directory and upload malicious files.CVE-2021-38406delta electronicsdopsoft 2+1KEVEPSS score76.43%
Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could result in multiple out-of-bounds write instances. An attacker could leverage this vulnerability to execute code in the context of the current process.CVE-2021-38488delta electronicsdialink+1EPSS score12.34%
Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenticated attacker can inject arbitrary JavaScript code into the parameter comment of the API events, which may allow an attacker to remotely execute code.CVE-2021-38422delta electronicsdialink+1EPSS score0.18%
Delta Electronics DIALink versions 1.2.4.0 and prior stores sensitive information in cleartext, which may allow an attacker to have extensive access to the application directory and escalate privileges.CVE-2021-44544delta electronicsdiaenergie+1EPSS score9.49%
DIAEnergie Version 1.7.5 and prior is vulnerable to multiple cross-site scripting vulnerabilities when arbitrary code is injected into the parameter “name” of the script “HandlerEnergyType.ashx”.CVE-2021-44471delta electronicsdiaenergie+1EPSS score0.70%
DIAEnergie Version 1.7.5 and prior is vulnerable to stored cross-site scripting when an unauthenticated user injects arbitrary code into the parameter “name” of the script “DIAE_HandlerAlarmGroup.ashx”.CVE-2021-44768delta electronicscncsoft+1EPSS score0.69%
Delta Electronics CNCSoft (Version 1.01.30) and prior) is vulnerable to an out-of-bounds read while processing a specific project file, which may allow an attacker to disclose information.CVE-2021-32969delta electronicsdiascreen+1EPSS score1.22%
Delta Electronics DIAScreen versions prior to 1.1.0 are vulnerable to an out-of-bounds write condition, which may result in a system crash or allow an attacker to remotely execute arbitrary code.CVE-2021-32965delta electronicsdiascreen+1EPSS score1.22%
Delta Electronics DIAScreen versions prior to 1.1.0 are vulnerable to type confusion, which may allow an attacker to remotely execute arbitrary code.CVE-2021-23228delta electronicsdiaenergie+1EPSS score0.64%
DIAEnergie Version 1.7.5 and prior is vulnerable to a reflected cross-site scripting attack through error pages that are returned by “.NET Request.QueryString”.CVE-2016-5805delta_electronicsispsoft+2EPSS score1.71%
An issue was discovered in Delta Electronics WPLSoft, Versions prior to V2.42.11, ISPSoft, Versions prior to 3.02.11, and PMSoft, Versions prior to2.10.10. There are multiple instances of heap-based buffer overflows that may allow malicious files to cause the execution of arbitrary code or a denial of service.CVE-2016-5802delta_electronicsispsoft+2EPSS score1.05%
An issue was discovered in Delta Electronics WPLSoft, Versions prior to V2.42.11, ISPSoft, Versions prior to 3.02.11, and PMSoft, Versions prior to 2.10.10. Multiple instances of out-of-bounds write conditions may allow malicious files to be read and executed by the affected software.CVE-2025-59300delta electronicsdiascreen+1EPSS score0.19%
Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.CVE-2025-59298delta electronicsdiascreen+1EPSS score0.16%
Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.CVE-2025-59301delta electronicsdvp15mc11t+1EPSS score0.22%
Delta Electronics DVP15MC11T lacks proper validation of the modbus/tcp packets and can lead to denial of service.CVE-2025-59297delta electronicsdiascreen+1EPSS score0.16%
Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.CVE-2025-59299delta electronicsdiascreen+1EPSS score0.16%
Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.CVE-2025-62578delta electronicsdvp-12seEPSS score0.34%
DVP-12SE - Modbus/TCP Cleartext Transmission of Sensitive InformationCVE-2025-62579delta electronicsasda-soft+1EPSS score0.20%
ASDA-Soft Stack-based Buffer Overflow VulnerabilityCVE-2025-62582delta electronicsdiaview+1EPSS score0.53%
Delta Electronics DIAView has multiple vulnerabilities.