CVE Feed

    Dashboard / CVE / CVE-2021-38411

    CVE-2021-38411

    Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenticated attacker can inject arbitrary JavaScript code into the parameter deviceName of the API modbusWriter-Reader, which may allow an attacker to remotely execute code.

    Published:Nov 3, 2021
    Last Modified:Nov 21, 2024
    EPS:Nov 3, 2021
    EPSS Score:0.00203
    CVSS Score:5.5

    Affected Products

    Vendor
    Deltaww
    Product
    Dialink

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-58320 (CVSS 7.3) — Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability.…
    CVE-2025-58321 (CVSS 10) — Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability.…
    CVE-2022-2660 (CVSS 9.8) — Delta Industrial Automation DIALink versions 1.4.0.0 and prior are vulnerable to the use of a hard-coded crypt…
    CVE-2022-2969 (CVSS 8.1) — Delta Industrial Automation DIALink versions prior to v1.5.0.0 Beta 4 uses an external input to construct a pa…
    CVE-2021-38488 (CVSS 5.5) — Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenti…
    CVE-2021-38416 (CVSS 7.8) — Delta Electronics DIALink versions 1.2.4.0 and prior insecurely loads libraries, which may allow an attacker t…
    CVE-2021-38428 (CVSS 5.5) — Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenti…
    CVE-2021-38420 (CVSS 7.8) — Delta Electronics DIALink versions 1.2.4.0 and prior default permissions give extensive permissions to low-pri…
    CVE-2021-38407 (CVSS 5.5) — Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenti…
    CVE-2021-38424 (CVSS 5.9) — The tag interface of Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to an attacker injecti…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High