Delta Electronics vulnerabilities, page 4
226 vulnerabilities
Known vulnerabilities in Delta Electronics products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 37 products.
CVE-2025-57702delta electronicsdiaenergie+1
EPSS score0.16%
DIAEnergie - Reflected Cross-site ScriptingCVE-2025-57700delta electronicsdiaenergie+1EPSS score0.18%
DIAEnergie - Stored Cross-site ScriptingCVE-2025-57704delta electronicseip builderEPSS score0.18%
Delta Electronics EIP Builder version 1.11 is vulnerable to a File Parsing XML External Entity Processing Information Disclosure Vulnerability.CVE-2025-57703delta electronicsdiaenergie+1EPSS score0.16%
DIAEnergie - Reflected Cross-site ScriptingCVE-2025-22880delta electronicscncsoft-g2+1EPSS score0.24%
Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current process.CVE-2025-22882delta_electronicsispsoft+1EPSS score0.43%
Delta Electronics ISPSoft version 3.20 is vulnerable to a Stack-Based buffer overflow vulnerability that could allow an attacker to leverage debugging logic to execute arbitrary code when parsing CBDGL file.CVE-2025-22884delta_electronicsispsoft+1EPSS score0.39%
Delta Electronics ISPSoft version 3.20 is vulnerable to a Stack-Based buffer overflow vulnerability that could allow an attacker to execute arbitrary code when parsing DVP file.CVE-2025-22881delta electronicscncsoft-g2+1EPSS score0.27%
Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current process.CVE-2025-22883delta_electronicsispsoft+1EPSS score0.38%
Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitrary code when parsing DVP file.CVE-2025-15359delta electronicsdvp-12se11t+1EPSS score0.34%
DVP-12SE11T - Out-of-bound memory write VulnerabilityCVE-2025-15102delta electronicsdvp-12se11t+1EPSS score0.32%
DVP-12SE11T - Password Protection BypassCVE-2025-15358delta electronicsdvp-12se11t+1EPSS score0.32%
DVP-12SE11T - Denial of Service VulnerabilityCVE-2025-15103delta electronicsdvp-12se11t+1EPSS score0.34%
DVP-12SE11T - Authentication Bypass via Partial Password DisclosureCVE-2025-3495delta electronicscommgrEPSS score0.73%
Delta Electronics COMMGR v1 and v2 uses insufficiently randomized values to generate session IDs (CWE-338). An attacker could easily brute force a session ID and load and execute arbitrary code.CVE-2022-40965delta electronicsdiaenergie+1EPSS score11.11%
The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the PostEnergyType API.CVE-2022-40967delta electronicsdiaenergie+1EPSS score7.69%
The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in CheckIoTHubNameExisted. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries.CVE-2022-40202delta electronicsinfrasuite device master+1EPSS score1.40%
The database backup function in Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior lacks proper authentication. An attacker could provide malicious serialized objects which, when deserialized, could activate an opcode for a backup scheduling function without authentication. This function allows the user to designate all function arguments and the file to be executed. This could allow the attacker to start any new process and achieve remote code execution.CVE-2022-2759delta electronicsdelta robot automation studio (dras)+1EPSS score1.17%
Delta Electronics Delta Robot Automation Studio (DRAS) versions prior to 1.13.20 are affected by improper restrictions where the software processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output. This may allow an attacker to view sensitive documents and information on the affected host.CVE-2022-2966delta electronicsdopsoftEPSS score0.38%
Out-of-bounds Read vulnerability in Delta Electronics DOPSoft.This issue affects DOPSoft: All Versions.CVE-2022-2660delta electronicsindustrial automation dialink+1EPSS score0.66%
Delta Industrial Automation DIALink versions 1.4.0.0 and prior are vulnerable to the use of a hard-coded cryptographic key which could allow an attacker to decrypt sensitive data and compromise the machine.