DI
Product
Dialink
14
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 7Medium 6Low 0
Watch
Add Dialink to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-58321 | 10.0 | Sep 11 | DIALink - Directory Traversal Authentication Bypass Vulnerability Affected: before 1.8.0.0 |
| CVE-2021-38424 | 7.8 | Nov 3 | The tag interface of Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to an attacker injecting formulas into the tag data Affected: through 1.2.4.0 |
| CVE-2021-38422 | 7.8 | Nov 3 | Delta Electronics DIALink versions 1.2.4.0 and prior stores sensitive information in cleartext, which may allow an attacker to have extensive access to the application directory… Affected: through 1.2.4.0 |
| CVE-2021-38420 | 7.8 | Nov 3 | Delta Electronics DIALink versions 1.2.4.0 and prior default permissions give extensive permissions to low-privileged user accounts, which may allow an attacker to modify the… Affected: through 1.2.4.0 |
| CVE-2021-38416 | 7.8 | Nov 3 | Delta Electronics DIALink versions 1.2.4.0 and prior insecurely loads libraries, which may allow an attacker to use DLL hijacking and takeover the system where the software is… Affected: through 1.2.4.0 |
| CVE-2022-2660 | 7.5 | Dec 13 | Delta Industrial Automation DIALink versions 1.4.0.0 and prior are vulnerable to the use of a hard-coded cryptographic key which could allow an attacker to decrypt sensitive data… Affected: through 1.4.0.0 |
| CVE-2022-2969 | 7.5 | Dec 1 | Delta Industrial Automation DIALink versions prior to v1.5.0.0 Beta 4 uses an external input to construct a pathname intended to identify a file or directory located underneath a… Affected: before 1.5.0.0; 1.5.0.0 |
| CVE-2025-58320 | 7.3 | Sep 11 | DIALink - Directory Traversal Authentication Bypass Vulnerability Affected: before 1.8.0.0 |
| CVE-2021-38418 | 5.9 | Nov 3 | Delta Electronics DIALink versions 1.2.4.0 and prior runs by default on HTTP, which may allow an attacker to be positioned between the traffic and perform a machine-in-the-middle… Affected: through 1.2.4.0 |
| CVE-2021-38488 | 4.8 | Nov 3 | Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenticated attacker can inject arbitrary JavaScript code into the… Affected: through 1.2.4.0 |
| CVE-2021-38428 | 4.8 | Nov 3 | Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenticated attacker can inject arbitrary JavaScript code into the… Affected: through 1.2.4.0 |
| CVE-2021-38411 | 4.8 | Nov 3 | Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenticated attacker can inject arbitrary JavaScript code into the… Affected: through 1.2.4.0 |
| CVE-2021-38407 | 4.8 | Nov 3 | Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenticated attacker can inject arbitrary JavaScript code into the… Affected: through 1.2.4.0 |
| CVE-2021-38403 | 4.8 | Nov 3 | Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenticated attacker can inject arbitrary JavaScript code into the… Affected: through 1.2.4.0 |
Showing 14