Vulnerabilities in Delta Electronics

224 results
Vexday analysis

Com 224 CVEs catalogadas, o portfólio de vulnerabilidades da Delta Electronics apresenta 53 falhas de severidade crítica, o que representa uma parcela expressiva do total e merece atenção contínua das equipes de segurança. A taxa de exploração ativa está em linha com a média geral do catálogo, com um caso confirmado no CISA KEV: CVE-2021-38406, que registra EPSS de 0,7789 — indicando alta probabilidade de exploração e justificando priorização imediata de remediação em ambientes que ainda executam as versões afetadas. O tipo de falha mais comum é CWE-89 (SQL Injection), o que sugere deficiências recorrentes em práticas de desenvolvimento seguro relacionadas à validação e sanitização de entradas. A ausência de novas CVEs nos últimos 90 dias e a existência de apenas um PoC público não devem induzir complacência, dado o volume crítico acumulado e o score EPSS elevado da vulnerabilidade em exploração ativa.

CVE-2021-38406HIGHDelta Electronics DOPSoft 2 Out-of-Bounds WriteEPSS 77.9%KEVCVE-2023-1133CRITICALCVE-2023-1133EPSS 50.0%CVE-2024-4548CRITICALDelta Electronics DIAEnergie SQL InjectionEPSS 29.4%CVE-2022-41133HIGHDelta Electronics DIAEnergieEPSS 26.6%CVE-2022-41772CRITICAL Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior mishandle .ZIP archives containing characters used in path traversaEPSS 24.9%CVE-2022-41657CRITICAL Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior allow attacker provided data already serialized into memory to be uEPSS 20.9%CVE-2022-1378CRITICALDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_pgHandler.ashx. This EPSS 18.9%CVE-2022-1367CRITICALDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in Handler_TCV.ashx. This allEPSS 18.9%CVE-2022-1366CRITICALDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerChart.ashx. This alEPSS 18.9%CVE-2022-38142CRITICAL Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-Gateway EPSS 18.2%CVE-2024-10456CRITICALDelta Electronics InfraSuite Device Master Deserialization of Untrusted DataEPSS 17.6%CVE-2023-47207CRITICALDelta Electronics InfraSuite Device Master Deserialization of Untrusted DataEPSS 16.6%CVE-2025-58320HIGHDIALink - Directory Traversal Authentication Bypass VulnerabilityEPSS 13.2%CVE-2021-38488MEDIUMDelta Electronics DIALinkEPSS 12.3%CVE-2021-38428MEDIUMDelta Electronics DIALinkEPSS 11.4%CVE-2022-25347CRITICALDelta Electronics DIAEnergie Path TraversalEPSS 11.4%CVE-2025-53417CRITICALFile Parsing Deserialization of Untrusted Data in DTM SoftEPSS 11.1%CVE-2022-41701HIGHDelta Electronics DIAEnergieEPSS 11.1%CVE-2022-41651HIGHDelta Electronics DIAEnergieEPSS 11.1%CVE-2022-41555HIGHDelta Electronics DIAEnergieEPSS 11.1%