İçeriğe atla
Noroxi

deltaww kayıtları

deltaww üreticisine ait 295 yayımlanmış kayıt. Bunların 1 tanesi sahada sömürüldü (CISA KEV listesinde), 4 tanesi için hazır saldırı aracı var.

Ürüne göre süzün ↓

Araştırmacı profili

KEV’e giren
1 · %0,3
Silahlaştırılmış
4 · %1,4
Pre-auth RCE
37
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
342 gün

Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.

Yıllara göre kayıt

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25
  9. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

295 kayıt
  • CVE-2021-38406
    84Hemen

    Delta Electronics DOPSoft 2 Out-of-Bounds Write

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %76

    deltaww · dopsoft17 Eyl 2021

  • CVE-2018-10594
    60Bu hafta

    Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPSimulator EH2, EH3, E

    KritikCVSS 9,8SilahlaştırılmışEPSS %68

    deltaww · commgr26 Haz 2018

  • CVE-2023-1133
    60Bu hafta

    Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a vulnerability in which the Device-status service listens on por

    KritikCVSS 9,8SilahlaştırılmışEPSS %50

    deltaww · infrasuite device master27 Mar 2023

  • CVE-2024-4548
    60Bu hafta

    Delta Electronics DIAEnergie SQL Injection

    KritikCVSS 9,8SilahlaştırılmışEPSS %29

    deltaww · diaenergie6 May 2024

  • CVE-2021-32955
    50Planlayın

    Delta Electronics DIAEnergie Version 1.7.5 and prior allows unrestricted file uploads, which may allow an attacker to remotely execute code.

    KritikCVSS 9,8İstismar yokEPSS %37

    deltaww · diaenergie30 Ağu 2021

  • CVE-2022-41772
    47Planlayın

    Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior mishandle .ZIP archives containing characters used in path traversa

    KritikCVSS 9,8İstismar yokEPSS %25

    deltaww · infrasuite device master31 Eki 2022

  • CVE-2022-43775
    45Planlayın

    The HICT_Loop class in Delta Electronics DIAEnergy v1.9 contains a SQL Injection flaw that could allow an attacker to gain code execution on

    KritikCVSS 9,8İstismar yokEPSS %21

    deltaww · diaenergie26 Eki 2022

  • CVE-2022-41657
    45Planlayın

    Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior allow attacker provided data already serialized into memory to be u

    KritikCVSS 9,8İstismar yokEPSS %21

    deltaww · infrasuite device master31 Eki 2022

  • CVE-2021-38390
    45Planlayın

    A Blind SQL injection vulnerability exists in the /DataHandler/HandlerEnergyType.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5

    KritikCVSS 9,8İstismar yokEPSS %19

    deltaww · diaenergie30 Ağu 2021

  • CVE-2022-1366
    45Planlayın

    Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerChart.ashx.

    KritikCVSS 9,8İstismar yokEPSS %19

    deltaww · diaenergie2 May 2022

  • CVE-2022-1367
    45Planlayın

    Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in Handler_TCV.ashx.

    KritikCVSS 9,8İstismar yokEPSS %19

    deltaww · diaenergie2 May 2022

  • CVE-2022-1378
    45Planlayın

    Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_pgHandler.ashx.

    KritikCVSS 9,8İstismar yokEPSS %19

    deltaww · diaenergie2 May 2022

  • CVE-2022-38142
    45Planlayın

    Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-Gateway

    KritikCVSS 9,8İstismar yokEPSS %18

    deltaww · infrasuite device master31 Eki 2022

  • CVE-2021-38393
    45Planlayın

    A Blind SQL injection vulnerability exists in the /DataHandler/HandlerAlarmGroup.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5

    KritikCVSS 9,8İstismar yokEPSS %18

    deltaww · diaenergie30 Ağu 2021

  • CVE-2023-47207
    44Planlayın

    Delta Electronics InfraSuite Device Master Deserialization of Untrusted Data

    KritikCVSS 9,8İstismar yokEPSS %16

    deltaww · infrasuite device master30 Kas 2023

  • CVE-2022-41133
    43Planlayın

    Delta Electronics DIAEnergie

    YüksekCVSS 8,8İstismar yokEPSS %27

    deltaww · diaenergie27 Eki 2022

  • CVE-2024-10456
    42Planlayın

    Delta Electronics InfraSuite Device Master Deserialization of Untrusted Data

    KritikCVSS 9,3İstismar yokEPSS %17

    delta electronics · infrasuite device master30 Eki 2024

  • CVE-2022-26013
    42Planlayın

    Delta Electronics DIAEnergie SQL Injection in DIAE_dmdsetHandler.ashx

    KritikCVSS 9,8İstismar yokEPSS %9

    deltaww · diaenergie29 Mar 2022

  • CVE-2022-26887
    42Planlayın

    Delta Electronics DIAEnergie SQL Injection in DIAE_HandlerTag_KID.ashx

    KritikCVSS 9,8İstismar yokEPSS %9

    deltaww · diaenergie29 Mar 2022

  • CVE-2024-25574
    42Planlayın

    Delta Electronics DIAEnergie SQL Injection

    KritikCVSS 9,8İstismar yokEPSS %8

    deltaww · diaenergie1 Nis 2024

  • CVE-2022-42139
    40Planlayın

    Delta Electronics DVW-W02W2-E2 1.5.0.10 is vulnerable to Command Injection via Crafted URL.

    YüksekCVSS 8,8İstismar yokEPSS %18

    deltaww · dvw-w02w2-e2 firmware13 Ara 2022

  • CVE-2021-32983
    40Planlayın

    A Blind SQL injection vulnerability exists in the /DataHandler/Handler_CFG.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5 and p

    KritikCVSS 9,8İstismar yokEPSS %3

    deltaww · diaenergie30 Ağu 2021

  • CVE-2018-8871
    40Planlayın

    In Delta Electronics Automation TPEditor version 1.89 or prior, parsing a malformed program file may cause heap-based buffer overflow vulner

    KritikCVSS 9,8İstismar yokEPSS %3

    deltaww · tpeditor25 May 2018

  • CVE-2018-10617
    40Planlayın

    Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior utilizes a fixed-length heap buffer where a value larger tha

    KritikCVSS 9,8İstismar yokEPSS %3

    deltaww · delta industrial automation dopsoft18 Haz 2018

  • CVE-2018-10623
    40Planlayın

    Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior performs read operations on a memory buffer where the positi

    KritikCVSS 9,8İstismar yokEPSS %3

    deltaww · delta industrial automation dopsoft18 Haz 2018