Delta Electronics DMARS

🗓️ 14 Apr 2022 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 42 Views

Delta Electronics DMARS vulnerability: Improper Restriction of XML External Entity Reference. Low attack complexity. Risk of sensitive information disclosure. Critical Infrastructure: Critical Manufacturing. Worldwide deployment, headquarters in Taiwan. CVE-2022-1331. Mitigations and recommendations provided by Delta Electronics and CISA

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2022-1331	3 May 202222:35	–	circl
CNNVD	Delta Electronics DMARS 代码问题漏洞	14 Apr 202200:00	–	cnnvd
CVE	CVE-2022-1331	3 May 202218:44	–	cve
Cvelist	CVE-2022-1331 Delta Electronics DMARS Improper Restriction of XML External Entity Reference	3 May 202218:44	–	cvelist
EUVD	EUVD-2022-24658	3 Oct 202520:07	–	euvd
NVD	CVE-2022-1331	3 May 202219:15	–	nvd
OSV	CVE-2022-1331	3 May 202219:15	–	osv
Prion	Information disclosure	3 May 202219:15	–	prion
Zero Day Initiative	Delta Industrial Automation DMARS DSCP Scope File Parsing XML External Entity Processing Information Disclosure Vulnerability	28 Apr 202200:00	–	zdi
Zero Day Initiative	Delta Industrial Automation DMARS ScopeConfig File Parsing XML External Entity Processing Information Disclosure Vulnerability	28 Apr 202200:00	–	zdi

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2022/icsa-22-104-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-22-104-01
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014
cisa	www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

14 Apr 2022 00:00Current

5.6Medium risk

Vulners AI Score5.6

CVSS 24.3

CVSS 3.15.5

EPSS0.00127