CVE Feed

    Dashboard / CVE / CVE-2021-38418

    CVE-2021-38418

    Delta Electronics DIALink versions 1.2.4.0 and prior runs by default on HTTP, which may allow an attacker to be positioned between the traffic and perform a machine-in-the-middle attack to access information without authorization.

    Published:Nov 3, 2021
    Last Modified:Nov 21, 2024
    EPS:Nov 3, 2021
    EPSS Score:0.00072
    CVSS Score:8.8

    Affected Products

    Vendor
    Deltaww
    Product
    Dialink

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-58320 (CVSS 7.3) — Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability.…
    CVE-2025-58321 (CVSS 10) — Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability.…
    CVE-2022-2660 (CVSS 9.8) — Delta Industrial Automation DIALink versions 1.4.0.0 and prior are vulnerable to the use of a hard-coded crypt…
    CVE-2022-2969 (CVSS 8.1) — Delta Industrial Automation DIALink versions prior to v1.5.0.0 Beta 4 uses an external input to construct a pa…
    CVE-2021-38488 (CVSS 5.5) — Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenti…
    CVE-2021-38416 (CVSS 7.8) — Delta Electronics DIALink versions 1.2.4.0 and prior insecurely loads libraries, which may allow an attacker t…
    CVE-2021-38428 (CVSS 5.5) — Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenti…
    CVE-2021-38420 (CVSS 7.8) — Delta Electronics DIALink versions 1.2.4.0 and prior default permissions give extensive permissions to low-pri…
    CVE-2021-38407 (CVSS 5.5) — Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenti…
    CVE-2021-38424 (CVSS 5.9) — The tag interface of Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to an attacker injecti…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High