Vulnerabilities in Delta Electronics

224 results
Vexday analysis

Com 224 CVEs catalogadas, o portfólio de vulnerabilidades da Delta Electronics apresenta 53 falhas de severidade crítica, o que representa uma parcela expressiva do total e merece atenção contínua das equipes de segurança. A taxa de exploração ativa está em linha com a média geral do catálogo, com um caso confirmado no CISA KEV: CVE-2021-38406, que registra EPSS de 0,7789 — indicando alta probabilidade de exploração e justificando priorização imediata de remediação em ambientes que ainda executam as versões afetadas. O tipo de falha mais comum é CWE-89 (SQL Injection), o que sugere deficiências recorrentes em práticas de desenvolvimento seguro relacionadas à validação e sanitização de entradas. A ausência de novas CVEs nos últimos 90 dias e a existência de apenas um PoC público não devem induzir complacência, dado o volume crítico acumulado e o score EPSS elevado da vulnerabilidade em exploração ativa.

CVE-2023-43818HIGHDelta Electronics Delta Industrial Automation DOPSoft DPS File wTextLen Buffer Overflow Remote Code ExecutionEPSS 1.0%CVE-2023-43819HIGHDelta Electronics Delta Industrial Automation DOPSoft DPS File InitialMacroLen Buffer Overflow Remote Code ExecutionEPSS 1.0%CVE-2023-43824HIGHDelta Electronics Delta Industrial Automation DOPSoft DPS File wTitleTextLen Buffer Overflow Remote Code ExecutionEPSS 1.0%CVE-2023-43821HIGHDelta Electronics Delta Industrial Automation DOPSoft DPS File wLogTitlesActionLen Buffer Overflow Remote Code ExecutionEPSS 1.0%CVE-2023-43823HIGHDelta Electronics Delta Industrial Automation DOPSoft DPS File wTTitleLen Buffer Overflow Remote Code ExecutionEPSS 1.0%CVE-2023-34347CRITICAL​Delta Electronics InfraSuite Device Master Deserialization of Untrusted DataEPSS 1.0%CVE-2023-5459MEDIUMDelta Electronics DVP32ES2 PLC Password Transmission denial of serviceEPSS 0.9%CVE-2022-1403HIGHDelta Electronics ASDA-Soft Out-of-bounds WriteEPSS 0.8%CVE-2022-1402HIGHDelta Electronics ASDA-Soft Out-of-bounds ReadEPSS 0.8%CVE-2023-1143HIGHCVE-2023-1143EPSS 0.8%CVE-2024-8255HIGHPath Traversal in Ocean Data Systems Dream ReportEPSS 0.8%CVE-2023-5131HIGHDelta Electronics ISPSoft Heap Buffer-OverflowEPSS 0.8%CVE-2022-1331MEDIUMDelta Electronics DMARS Improper Restriction of XML External Entity ReferenceEPSS 0.8%CVE-2023-43822HIGHDelta Electronics Delta Industrial Automation DOPSoft DPS File wLogTitlesTimeLen Buffer Overflow Remote Code ExecutionEPSS 0.8%CVE-2024-1941HIGHDelta Electronics CNCSoft-B Stack-based Buffer OverflowEPSS 0.7%CVE-2024-39883HIGHHeap-based Buffer Overflow in Delta Electronics CNCSoft-G2EPSS 0.7%CVE-2024-39880HIGHStack-based Buffer Overflow in Delta Electronics CNCSoft-G2EPSS 0.7%CVE-2023-1136CRITICALCVE-2023-1136EPSS 0.7%CVE-2022-41644HIGH Delta Electronics InfraSuite Device Master versions 00.00.01a and prior lacks authentication for a function that changes group privilegesEPSS 0.7%CVE-2022-43506HIGHDelta Electronics DIAEnergie SQL InjectionEPSS 0.7%