Vulnerabilidades em Delta Electronics

224 resultados
Análise Vexday

Com 224 CVEs catalogadas, o portfólio de vulnerabilidades da Delta Electronics apresenta 53 falhas de severidade crítica, o que representa uma parcela expressiva do total e merece atenção contínua das equipes de segurança. A taxa de exploração ativa está em linha com a média geral do catálogo, com um caso confirmado no CISA KEV: CVE-2021-38406, que registra EPSS de 0,7789 — indicando alta probabilidade de exploração e justificando priorização imediata de remediação em ambientes que ainda executam as versões afetadas. O tipo de falha mais comum é CWE-89 (SQL Injection), o que sugere deficiências recorrentes em práticas de desenvolvimento seguro relacionadas à validação e sanitização de entradas. A ausência de novas CVEs nos últimos 90 dias e a existência de apenas um PoC público não devem induzir complacência, dado o volume crítico acumulado e o score EPSS elevado da vulnerabilidade em exploração ativa.

CVE-2022-1369CRITICALDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadRegIND. This allows anEPSS 1.2%CVE-2022-1376CRITICALDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_privgrpHandler.ashx. EPSS 1.2%CVE-2022-1372CRITICALDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in dlSlog.aspx. This allows aEPSS 1.2%CVE-2022-26836CRITICALDelta Electronics DIAEnergie SQL Injection in HandlerExport.ashx/Calendar.ashxEPSS 1.2%CVE-2023-39226CRITICALDelta Electronics InfraSuite Device Master Exposed Dangerous Method Or FunctionEPSS 1.2%CVE-2022-2759MEDIUMDelta Electronics Delta Robot Automation Studio (DRAS) versions prior to 1.13.20 are affected by improper restrictions where the software prEPSS 1.2%CVE-2021-32969HIGHDelta Electronics DIAScreen - Type Confusion, Out-of-bounds WriteEPSS 1.1%CVE-2021-32965HIGHDelta Electronics DIAScreen - Type Confusion, Out-of-bounds WriteEPSS 1.1%CVE-2022-41779HIGH Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize network packets without proper verification. If the devEPSS 1.1%CVE-2023-47279HIGHDelta Electronics InfraSuite Device Master Path TraversalEPSS 1.1%CVE-2024-4549HIGHDelta Electronics DIAEnergie SQL Injection EPSS 1.1%CVE-2023-0432CRITICALCVE-2023-0432EPSS 1.1%CVE-2023-1142HIGHCVE-2023-1142EPSS 1.1%CVE-2023-1140CRITICALCVE-2023-1140EPSS 1.1%CVE-2022-0923CRITICALDelta Electronics DIAEnergie SQL Injection in HandlerDialog_KID.ashxEPSS 1.0%CVE-2021-38404HIGHDelta Electronics DOPSoft 2 Heap-based Buffer OverflowEPSS 1.0%CVE-2022-41778CRITICAL Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-DataCollEPSS 1.0%CVE-2019-10992—Delta Electronics CNCSoft ScreenEditor, Versions 1.00.89 and prior. Multiple out-of-bounds read vulnerabilities may cause information discloEPSS 1.0%CVE-2024-34033HIGHPath Traversal vulnerability in Delta Electronics DIAEnergie EPSS 1.0%CVE-2023-43820HIGHDelta Electronics Delta Industrial Automation DOPSoft DPS File wLogTitlesPrevValueLen Buffer Overflow Remote Code ExecutionEPSS 1.0%