Vulnerabilities in Delta Electronics

224 results
Vexday analysis

Com 224 CVEs catalogadas, o portfólio de vulnerabilidades da Delta Electronics apresenta 53 falhas de severidade crítica, o que representa uma parcela expressiva do total e merece atenção contínua das equipes de segurança. A taxa de exploração ativa está em linha com a média geral do catálogo, com um caso confirmado no CISA KEV: CVE-2021-38406, que registra EPSS de 0,7789 — indicando alta probabilidade de exploração e justificando priorização imediata de remediação em ambientes que ainda executam as versões afetadas. O tipo de falha mais comum é CWE-89 (SQL Injection), o que sugere deficiências recorrentes em práticas de desenvolvimento seguro relacionadas à validação e sanitização de entradas. A ausência de novas CVEs nos últimos 90 dias e a existência de apenas um PoC público não devem induzir complacência, dado o volume crítico acumulado e o score EPSS elevado da vulnerabilidade em exploração ativa.

CVE-2019-10982—Delta Electronics CNCSoft ScreenEditor, Versions 1.00.89 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by EPSS 1.4%CVE-2022-40202CRITICAL The database backup function in Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior lacks proper authentication. An attEPSS 1.3%CVE-2023-1139HIGHCVE-2023-1139EPSS 1.3%CVE-2025-58321CRITICALDIALink - Directory Traversal Authentication Bypass VulnerabilityEPSS 1.3%CVE-2022-1377CRITICALDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_rltHandler.ashx. ThisEPSS 1.2%CVE-2022-1369CRITICALDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadRegIND. This allows anEPSS 1.2%CVE-2022-1370CRITICALDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadREGbyID. This allows aEPSS 1.2%CVE-2022-1374CRITICALDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_unHandler.ashx. This EPSS 1.2%CVE-2022-26338CRITICALDelta Electronics DIAEnergie SQL Injection in DIAE_hierarchyHandler.ashxEPSS 1.2%CVE-2022-27175CRITICALDelta Electronics DIAEnergie SQL Injection in GetCalcTagListEPSS 1.2%CVE-2022-26514CRITICALDelta Electronics DIAEnergie SQL Injection in DIAE_tagHandler.ashxEPSS 1.2%CVE-2022-1376CRITICALDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_privgrpHandler.ashx. EPSS 1.2%CVE-2022-26667CRITICALDelta Electronics DIAEnergie SQL Injection in GetDemandAnalysisDataEPSS 1.2%CVE-2022-1371CRITICALDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadRegf. This allows an aEPSS 1.2%CVE-2022-1375CRITICALDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_slogHandler.ashx. ThiEPSS 1.2%CVE-2022-26069CRITICALDelta Electronics DIAEnergie SQL Injection in HandlerPage_KID.ashxEPSS 1.2%CVE-2022-26349CRITICALDelta Electronics DIAEnergie SQL Injection in DIAE_eccoefficientHandler.ashxEPSS 1.2%CVE-2022-26666CRITICALDelta Electronics DIAEnergie SQL Injection in HandlerDialogECC.ashxEPSS 1.2%CVE-2022-25880CRITICALDelta Electronics DIAEnergie SQL Injection in DIAE_hierarchyHandler.ashxEPSS 1.2%CVE-2022-26065CRITICALDelta Electronics DIAEnergie SQL Injection in GetLatestDemandNode and GetDemandAnalysisDataEPSS 1.2%