Delta Industrial Automation vulnerabilities
6 vulnerabilities
Known vulnerabilities in Delta Industrial Automation products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 6 products.
Products
6- Dopsoft2 vulnerabilities
- 4G Router DX 30211 vulnerabilities
- Cncsoft1 vulnerabilities
- Cncsoft B Dopsoft1 vulnerabilities
- Dialink1 vulnerabilities
- Screeneditor1 vulnerabilities
CVE-2022-2969delta industrial automationdialink+1
EPSS score2.43%
Delta Industrial Automation DIALink versions prior to v1.5.0.0 Beta 4 uses an external input to construct a pathname intended to identify a file or directory located underneath a restricted parent directory. However, the software does not properly neutralize special elements within the pathname, which can cause the pathname to resolve to a location outside of the restricted directory.CVE-2022-4634delta industrial automationcncsoft+3EPSS score4.92%
All versions prior to Delta Electronic’s CNCSoft version 1.01.34 (running ScreenEditor versions 1.01.5 and prior) are vulnerable to a stack-based buffer overflow, which could allow an attacker to remotely execute arbitrary code.CVE-2022-4616delta industrial automation4g router dx-3021+1EPSS score4.76%
The webserver in Delta DX-3021 versions prior to 1.24 is vulnerable to
command injection through the network diagnosis page. This vulnerability
could allow a remote unauthenticated user to add files, delete files,
and change file permissions.CVE-2023-0124delta industrial automationdopsoft+1EPSS score0.24%
Delta Electronics DOPSoft versions 4.00.16.22 and prior are vulnerable to an out-of-bounds write, which could allow an attacker to remotely execute arbitrary code when a malformed file is introduced to the software.CVE-2023-0123delta industrial automationdopsoft+1EPSS score0.24%
Delta Electronics DOPSoft versions 4.00.16.22 and prior are vulnerable to a stack-based buffer overflow, which could allow an attacker to remotely execute arbitrary code when a malformed file is introduced to the software.CVE-2023-4685delta industrial automationcncsoft-b dopsoft+2EPSS score0.23%
Delta Electronics' CNCSoft-B version 1.0.0.4 and DOPSoft versions 4.0.0.82 and prior are vulnerable to stack-based buffer overflow, which could allow an attacker to execute arbitrary code.