CVE-2021-32955: Unrestricted Upload of File with Dangerous Type

Delta Electronics DIAEnergie Version 1.7.5 and prior allows unrestricted file uploads, which may allow an attacker to remotely execute code...

CVE-2021-33003: Use of Password Hash With Insufficient Computational Effort

Delta Electronics DIAEnergie Version 1.7.5 and prior may allow an attacker to retrieve passwords in cleartext due to a weak hashing algorithm...

CVE-2021-32991: Cross-Site Request Forgery (CSRF)

Delta Electronics DIAEnergie Version 1.7.5 and prior is vulnerable to cross-site request forgery, which may allow an attacker to cause a user to carry out an action unintentionally...

CVE-2021-32967: Authentication Bypass Using an Alternate Path or Channel

Delta Electronics DIAEnergie Version 1.7.5 and prior may allow an attacker to add a new administrative user without being authenticated or authorized, which may allow the attacker to log in and use the device with administrative privileges...

CVE-2021-33007: Heap-based Buffer Overflow

A heap-based buffer overflow in Delta Electronics TPEditor: v1.98.06 and prior may be exploited by processing a specially crafted project file. Successful exploitation of this vulnerability may allow an attacker to execute arbitrary code...

CVE-2021-33019: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability in Delta Electronics DOPSoft Version 4.00.11 and prior may be exploited by processing a specially crafted project file, which may allow an attacker to execute arbitrary code...

PT-2021-20015

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions 1.7.5 and prior Description The issue allows an attacker to retrieve passwords in cleartext due to a weak hashing algorithm. Recommendations For Delta Electronics DIAEnergie versions 1.7.5 and prior, updat...

DIAEnergie Weak Hash Algorithm Vulnerability

DIAEnergie is an industrial energy management system from Delta Electronics. A weak hash algorithm vulnerability exists in DIAEnergie 1.7.5 and earlier versions. An attacker can exploit this vulnerability to retrieve plaintext passwords...

DIAEnergie Cross-Site Request Forgery Vulnerability

DIAEnergie is an industrial energy management system from Delta Electronics. A cross-site request forgery vulnerability exists in DIAEnergie 1.7.5 and earlier versions. An attacker can exploit this vulnerability to perform unauthorized operations...

DOPSoft Stack Buffer Overflow Vulnerability

DOPSoft is a Human Machine Interface HMI programming software from Delta Electronics. A stack buffer overflow vulnerability exists in DOPSoft 4.00.11 and earlier versions. The vulnerability can be exploited by an attacker to execute arbitrary code via a specially crafted project file...

DIAEnergie File Upload Vulnerability

DIAEnergie, an industrial energy management system from Delta Electronics, is vulnerable to a file upload vulnerability in DIAEnergie 1.7.5 and earlier versions. An attacker could exploit this vulnerability to achieve remote code execution...

DOPSoft Buffer Overflow

The vulnerability of the DOPSoft software, designed for programming Delta Electronics’ DOP-100 series operator panels, is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

PT-2021-20017

Name of the Vulnerable Software and Affected Versions Delta Electronics TPEditor versions 1.98.06 and prior Description A heap-based buffer overflow may be exploited by processing a specially crafted project file, potentially allowing an attacker to execute arbitrary code. Recommendations For...

Delta Electronics DIAEnergie buffer error vulnerability

Delta Electronics DIAEnergie is an industrial energy management system for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and maximizing energy efficiency. A securi...

Delta Electronics DIAEnergie authorization issue vulnerability

DIAEnergie, an industrial energy management system from Delta Electronics, is vulnerable to an authentication bypass in DIAEnergie 1.7.5 and earlier. An attacker could use this vulnerability to add a new administrative user without authentication or authorization to be able to log in and use the...

Delta Electronics DIAEnergie encryption issue vulnerability

DIAEnergie is an industrial energy management system from Delta Electronics. A weak hash algorithm vulnerability exists in DIAEnergie 1.7.5 and earlier versions. An attacker can exploit this vulnerability to retrieve plaintext passwords...

Delta Electronics DIAEnergie cross-site request forgeing vulnerability

DIAEnergie is an industrial energy management system from Delta Electronics. A cross-site request forgery vulnerability exists in DIAEnergie 1.7.5 and earlier versions. An attacker can exploit this vulnerability to perform unauthorized operations...

Delta Electronics DOPSoft (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Delta Electronics Equipment: DOPSoft Vulnerability: Stack-based Buffer Overflow 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-21-238-04 Delta Electronics DOPSoft that was...

Delta Electronics TPEditor Security Vulnerability

TPEditor is programming software for Delta Text Panel running on Windows. TPEditor 1.98.06 and earlier versions are vulnerable to a heap buffer overflow. An attacker can exploit the vulnerability to execute arbitrary code via specially crafted project files...

Delta Electronics TPEditor

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Delta Electronics Equipment: TPEditor Vulnerability: Heap-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability may allow for arbitrary code execution. 3. TECHNICAL DETAILS 3.1 AFFECTED...