Deltaww vulnerabilities, page 3
310 vulnerabilities
Known vulnerabilities in Deltaww products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 49 products.
CVE-2021-22672deltawwcncsoft_screeneditor
EPSS score9.01%
Delta Electronics' CNCSoft ScreenEditor in versions prior to v1.01.30 could allow the corruption of data, a denial-of-service condition, or code execution. The vulnerability may allow an attacker to remotely execute arbitrary code.CVE-2021-44544delta electronicsdiaenergie+1EPSS score9.49%
DIAEnergie Version 1.7.5 and prior is vulnerable to multiple cross-site scripting vulnerabilities when arbitrary code is injected into the parameter “name” of the script “HandlerEnergyType.ashx”.CVE-2021-44471delta electronicsdiaenergie+1EPSS score0.70%
DIAEnergie Version 1.7.5 and prior is vulnerable to stored cross-site scripting when an unauthenticated user injects arbitrary code into the parameter “name” of the script “DIAE_HandlerAlarmGroup.ashx”.CVE-2021-44768delta electronicscncsoft+1EPSS score0.69%
Delta Electronics CNCSoft (Version 1.01.30) and prior) is vulnerable to an out-of-bounds read while processing a specific project file, which may allow an attacker to disclose information.CVE-2021-32969delta electronicsdiascreen+1EPSS score1.22%
Delta Electronics DIAScreen versions prior to 1.1.0 are vulnerable to an out-of-bounds write condition, which may result in a system crash or allow an attacker to remotely execute arbitrary code.CVE-2021-32955deltawwdiaenergieEPSS score37.32%
Delta Electronics DIAEnergie Version 1.7.5 and prior allows unrestricted file uploads, which may allow an attacker to remotely execute code.CVE-2021-32991deltawwdiaenergieEPSS score0.36%
Delta Electronics DIAEnergie Version 1.7.5 and prior is vulnerable to cross-site request forgery, which may allow an attacker to cause a user to carry out an action unintentionally.CVE-2021-32983deltawwdiaenergieEPSS score3.94%
A Blind SQL injection vulnerability exists in the /DataHandler/Handler_CFG.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5 and prior. The application does not properly validate the user-controlled value supplied through the parameter keyword before using it as part of an SQL query. A remote, unauthenticated attacker can exploit this issue to execute arbitrary code in the context of NT SERVICE\MSSQLSERVER.CVE-2021-32967deltawwdiaenergieEPSS score1.38%
Delta Electronics DIAEnergie Version 1.7.5 and prior may allow an attacker to add a new administrative user without being authenticated or authorized, which may allow the attacker to log in and use the device with administrative privileges.CVE-2021-32965delta electronicsdiascreen+1EPSS score1.22%
Delta Electronics DIAScreen versions prior to 1.1.0 are vulnerable to type confusion, which may allow an attacker to remotely execute arbitrary code.CVE-2021-33019deltawwdopsoftEPSS score2.50%
A stack-based buffer overflow vulnerability in Delta Electronics DOPSoft Version 4.00.11 and prior may be exploited by processing a specially crafted project file, which may allow an attacker to execute arbitrary code.CVE-2021-33003deltawwdiaenergieEPSS score0.17%
Delta Electronics DIAEnergie Version 1.7.5 and prior may allow an attacker to retrieve passwords in cleartext due to a weak hashing algorithm.CVE-2021-33007deltawwtpeditorEPSS score1.07%
A heap-based buffer overflow in Delta Electronics TPEditor: v1.98.06 and prior may be exploited by processing a specially crafted project file. Successful exploitation of this vulnerability may allow an attacker to execute arbitrary code.CVE-2021-23228delta electronicsdiaenergie+1EPSS score0.64%
DIAEnergie Version 1.7.5 and prior is vulnerable to a reflected cross-site scripting attack through error pages that are returned by “.NET Request.QueryString”.CVE-2025-59300delta electronicsdiascreen+1EPSS score0.19%
Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.CVE-2025-59298delta electronicsdiascreen+1EPSS score0.16%
Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.CVE-2025-59301delta electronicsdvp15mc11t+1EPSS score0.22%
Delta Electronics DVP15MC11T lacks proper validation of the modbus/tcp packets and can lead to denial of service.CVE-2025-59297delta electronicsdiascreen+1EPSS score0.16%
Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.CVE-2025-59299delta electronicsdiascreen+1EPSS score0.16%
Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.CVE-2025-62579delta electronicsasda-soft+1EPSS score0.20%
ASDA-Soft Stack-based Buffer Overflow Vulnerability