CVE-2022-42139

Summary: CVE-2022-42139 affects Delta Electronics DVW-W02W2-E2 firmware 1.5.0.10. The device’s web server is vulnerable to command injection (OS command injection) via crafted URLs, potentially allowing an attacker to gain full OS access on the device. Public PoCs have been reported; CVSS v3.1 ba...

CVE-2022-42140

Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Command Injection via lform/netdiagnose...

CVE-2022-42141

Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Cross Site Scripting XSS via lform/urlfilter...

CVE-2022-42139

Delta Electronics DVW-W02W2-E2 1.5.0.10 is vulnerable to Command Injection via Crafted URL...

CVE-2022-42139

Delta Electronics DVW-W02W2-E2 1.5.0.10 is vulnerable to Command Injection via Crafted URL...

CVE-2022-42140

Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Command Injection via lform/netdiagnose...

Delta Electronics DX-2100RW-WW 跨站脚本漏洞

The Delta Electronics DX-2100RW-WW is a router from Delta Electronics China. A security vulnerability exists in the Delta Electronics DX-2100RW-WW version 2.42, which stems from its lform/urlfilter component that allows attackers to implement cross-site scripting...

Delta Electronics DVW-W02W2-E2 2.42 Command Injection Vulnerability

Delta Electronics DVW-W02W2-E2 version 2.42 suffers from an authenticated command injection vulnerability. ------------------------------------------------------------------------------- title| Authenticated Command Injection product| Delta Electronics DVW-W02W2-E2 vulnerable version| V2.42 fixed...

Delta Electronics DX-2100-L1-CN 1.5.0.10 Command Injection / XSS Vulnerabilities

Delta Electronics DX-2100-L1-CN version 1.5.0.10 suffers from command injection and cross site scripting vulnerabilities. ------------------------------------------------------------------------------- title| Multiple Vulnerabilities product| Delta Electronics DX-2100-L1-CN vulnerable version|...

Delta Electronics DX-2100-L1-CN 1.5.0.10 Command Injection / XSS

CyberDanube Security Research 20221130-0 ------------------------------------------------------------------------------- title| Multiple Vulnerabilities product| Delta Electronics DX-2100-L1-CN vulnerable version| V1.5.0.10 fixed version| V1.5.0.12 CVE number| - impact| High homepage|...

Delta Electronics DVW-W02W2-E2 2.42 Command Injection

CyberDanube Security Research 20221130-1 ------------------------------------------------------------------------------- title| Authenticated Command Injection product| Delta Electronics DVW-W02W2-E2 vulnerable version| V2.42 fixed version| V2.5.2 CVE number| - impact| High homepage|...

Delta Electronics InfraSuite Device Master Gateway Detection

Binary data deltaelectronicsidmgatewaydetect.nbin...

Delta Electronics InfraSuite Device Master Gateway Information Disclosure (CVE-2022-41629)

Binary data deltaelectronicsidmcve-2022-41629.nbin...

PT-2022-7155 · Delta Electronics · Cncsoft-B Dopsoft

Name of the Vulnerable Software and Affected Versions: Delta Electronics' CNCSoft-B DOPSoft versions 1.0.0.4 and prior Description: The issue is related to a heap-based buffer overflow that could allow an attacker to execute arbitrary code. This occurs when processing DPA files, potentially...

CVE-2022-43506

SQL Injection in HandlerTagKID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network...

CVE-2022-43447

SQL Injection in AMEBillAnalysis.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network...

CVE-2022-43457

SQL Injection in HandlerPageKID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network...

CVE-2022-43452

SQL Injection in FtyInfoSetting.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network...

CVE-2022-43506

SQL Injection in HandlerTagKID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network...

CVE-2022-43452

SQL Injection in FtyInfoSetting.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network...