2492 matches found
CVE-2022-42139
Summary: CVE-2022-42139 affects Delta Electronics DVW-W02W2-E2 firmware 1.5.0.10. The device’s web server is vulnerable to command injection (OS command injection) via crafted URLs, potentially allowing an attacker to gain full OS access on the device. Public PoCs have been reported; CVSS v3.1 ba...
CVE-2022-42139
Delta Electronics DVW-W02W2-E2 1.5.0.10 is vulnerable to Command Injection via Crafted URL...
CVE-2022-42141
Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Cross Site Scripting XSS via lform/urlfilter...
CVE-2022-42141
Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Cross Site Scripting XSS via lform/urlfilter...
CVE-2022-42140
Delta Electronics DX-2100-L1-CN (firmware 2.42) is affected by CVE-2022-42140 due to an OS command injection vulnerability in the lform/net_diagnose component. The Red Hat/CISA entries indicate an authenticated OS command injection via the web configuration service, potentially enabling root comp...
CVE-2022-42141
CVE-2022-42141 affects Delta Electronics DX-2100-L1-CN (v2.42); the issue is Cross Site Scripting (XSS) via the lform/urlfilter component. The available sources confirm XSS without details on a fixed version. The Red Hat and NVD records consistently describe a CXSS vulnerability with medium overa...
Delta Electronics DX-2100RW-WW 跨站脚本漏洞
The Delta Electronics DX-2100RW-WW is a router from Delta Electronics China. A security vulnerability exists in the Delta Electronics DX-2100RW-WW version 2.42, which stems from its lform/urlfilter component that allows attackers to implement cross-site scripting...
PT-2022-6253 · Delta Electronics · Delta Electronics Dvw-W02W2-E2
Name of the Vulnerable Software and Affected Versions: Delta Electronics DVW-W02W2-E2 version 1.5.0.10 Description: The issue is related to a command injection vulnerability via crafted URLs in the web server of the Delta Electronics DVW-W02W2-E2 device. This vulnerability is due to the failure t...
Delta Electronics DX-2100-L1-CN 1.5.0.10 Command Injection / XSS Vulnerabilities
Delta Electronics DX-2100-L1-CN version 1.5.0.10 suffers from command injection and cross site scripting vulnerabilities. ------------------------------------------------------------------------------- title| Multiple Vulnerabilities product| Delta Electronics DX-2100-L1-CN vulnerable version|...
Delta Electronics DVW-W02W2-E2 2.42 Command Injection Vulnerability
Delta Electronics DVW-W02W2-E2 version 2.42 suffers from an authenticated command injection vulnerability. ------------------------------------------------------------------------------- title| Authenticated Command Injection product| Delta Electronics DVW-W02W2-E2 vulnerable version| V2.42 fixed...
Delta Electronics DX-2100-L1-CN 1.5.0.10 Command Injection / XSS
CyberDanube Security Research 20221130-0 ------------------------------------------------------------------------------- title| Multiple Vulnerabilities product| Delta Electronics DX-2100-L1-CN vulnerable version| V1.5.0.10 fixed version| V1.5.0.12 CVE number| - impact| High homepage|...
Delta Electronics DVW-W02W2-E2 2.42 Command Injection
CyberDanube Security Research 20221130-1 ------------------------------------------------------------------------------- title| Authenticated Command Injection product| Delta Electronics DVW-W02W2-E2 vulnerable version| V2.42 fixed version| V2.5.2 CVE number| - impact| High homepage|...
Delta Electronics InfraSuite Device Master Gateway Detection
Binary data deltaelectronicsidmgatewaydetect.nbin...
Delta Electronics InfraSuite Device Master Gateway Information Disclosure (CVE-2022-41629)
Binary data deltaelectronicsidmcve-2022-41629.nbin...
PT-2022-7155 · Delta Electronics · Cncsoft-B Dopsoft
Name of the Vulnerable Software and Affected Versions: Delta Electronics' CNCSoft-B DOPSoft versions 1.0.0.4 and prior Description: The issue is related to a heap-based buffer overflow that could allow an attacker to execute arbitrary code. This occurs when processing DPA files, potentially...
CVE-2022-43452
SQL Injection in FtyInfoSetting.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network...
CVE-2022-43506
SQL Injection in HandlerTagKID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network...
CVE-2022-43447
SQL Injection in AMEBillAnalysis.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network...
