CVE Feed

    Dashboard / CVE / CVE-2021-38422

    CVE-2021-38422

    Delta Electronics DIALink versions 1.2.4.0 and prior stores sensitive information in cleartext, which may allow an attacker to have extensive access to the application directory and escalate privileges.

    Published:Nov 3, 2021
    Last Modified:Nov 21, 2024
    EPS:Nov 3, 2021
    EPSS Score:0.00023
    CVSS Score:7.8

    Affected Products

    Vendor
    Deltaww
    Product
    Dialink

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-37 Retrieve Embedded Sensitive Data

    Related CVEs

    CVE-2025-58320 (CVSS 7.3) — Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability.…
    CVE-2025-58321 (CVSS 10) — Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability.…
    CVE-2022-2660 (CVSS 9.8) — Delta Industrial Automation DIALink versions 1.4.0.0 and prior are vulnerable to the use of a hard-coded crypt…
    CVE-2022-2969 (CVSS 8.1) — Delta Industrial Automation DIALink versions prior to v1.5.0.0 Beta 4 uses an external input to construct a pa…
    CVE-2021-38488 (CVSS 5.5) — Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenti…
    CVE-2021-38416 (CVSS 7.8) — Delta Electronics DIALink versions 1.2.4.0 and prior insecurely loads libraries, which may allow an attacker t…
    CVE-2021-38428 (CVSS 5.5) — Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenti…
    CVE-2021-38420 (CVSS 7.8) — Delta Electronics DIALink versions 1.2.4.0 and prior default permissions give extensive permissions to low-pri…
    CVE-2021-38407 (CVSS 5.5) — Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenti…
    CVE-2021-38424 (CVSS 5.9) — The tag interface of Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to an attacker injecti…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High