2780 matches found
CVE-2022-42140
Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Command Injection via lform/netdiagnose...
CVE-2022-42140
Delta Electronics DX-2100-L1-CN (firmware 2.42) is affected by CVE-2022-42140 due to an OS command injection vulnerability in the lform/net_diagnose component. The Red Hat/CISA entries indicate an authenticated OS command injection via the web configuration service, potentially enabling root comp...
CVE-2022-42141: Improper Neutralization of Input During Web Page Generation
Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Cross Site Scripting XSS via lform/urlfilter...
CVE-2022-42140: Improper Neutralization of Special Elements used in an OS Command
Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Command Injection via lform/netdiagnose...
CVE-2022-42139: Improper Neutralization of Special Elements used in an OS Command
Delta Electronics DVW-W02W2-E2 1.5.0.10 is vulnerable to Command Injection via Crafted URL...
CVE-2022-42139
Summary: CVE-2022-42139 affects Delta Electronics DVW-W02W2-E2 firmware 1.5.0.10. The device’s web server is vulnerable to command injection (OS command injection) via crafted URLs, potentially allowing an attacker to gain full OS access on the device. Public PoCs have been reported; CVSS v3.1 ba...
Delta Electronics DX-2100RW-WW Cross-site Scripting Vulnerability
The Delta Electronics DX-2100RW-WW is a router from Delta Electronics China. A security vulnerability exists in the Delta Electronics DX-2100RW-WW version 2.42, which stems from its lform/urlfilter component that allows attackers to implement cross-site scripting...
Delta Electronics DVW-W02W2-E2 2.42 Command Injection Vulnerability
Delta Electronics DVW-W02W2-E2 version 2.42 suffers from an authenticated command injection vulnerability. ------------------------------------------------------------------------------- title| Authenticated Command Injection product| Delta Electronics DVW-W02W2-E2 vulnerable version| V2.42 fixed...
Delta Electronics DX-2100-L1-CN 1.5.0.10 Command Injection / XSS Vulnerabilities
Delta Electronics DX-2100-L1-CN version 1.5.0.10 suffers from command injection and cross site scripting vulnerabilities. ------------------------------------------------------------------------------- title| Multiple Vulnerabilities product| Delta Electronics DX-2100-L1-CN vulnerable version|...
Delta Electronics DX-2100-L1-CN 1.5.0.10 Command Injection / XSS
CyberDanube Security Research 20221130-0 ------------------------------------------------------------------------------- title| Multiple Vulnerabilities product| Delta Electronics DX-2100-L1-CN vulnerable version| V1.5.0.10 fixed version| V1.5.0.12 CVE number| - impact| High homepage|...
Delta Electronics DVW-W02W2-E2 2.42 Command Injection
CyberDanube Security Research 20221130-1 ------------------------------------------------------------------------------- title| Authenticated Command Injection product| Delta Electronics DVW-W02W2-E2 vulnerable version| V2.42 fixed version| V2.5.2 CVE number| - impact| High homepage|...
Delta Electronics InfraSuite Device Master Gateway Detection
Binary data deltaelectronicsidmgatewaydetect.nbin...
Delta Electronics InfraSuite Device Master Gateway Information Disclosure (CVE-2022-41629)
Binary data deltaelectronicsidmcve-2022-41629.nbin...
PT-2022-7155 · Delta Electronics · Cncsoft-B Dopsoft
Name of the Vulnerable Software and Affected Versions: Delta Electronics' CNCSoft-B DOPSoft versions 1.0.0.4 and prior Description: The issue is related to a heap-based buffer overflow that could allow an attacker to execute arbitrary code. This occurs when processing DPA files, potentially...
CVE-2022-43506
SQL Injection in HandlerTagKID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network...
CVE-2022-43452
SQL Injection in FtyInfoSetting.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network...
CVE-2022-43452
SQL Injection in FtyInfoSetting.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network...
CVE-2022-43447
SQL Injection in AMEBillAnalysis.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network...