CVE Feed

    Dashboard / CVE / CVE-2021-38424

    CVE-2021-38424

    The tag interface of Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to an attacker injecting formulas into the tag data. Those formulas may then be executed when it is opened with a spreadsheet application.

    Published:Nov 3, 2021
    Last Modified:Nov 21, 2024
    EPS:Nov 3, 2021
    EPSS Score:0.00114
    CVSS Score:5.9

    Affected Products

    Vendor
    Deltaww
    Product
    Dialink

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2025-58320 (CVSS 7.3) — Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability.…
    CVE-2025-58321 (CVSS 10) — Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability.…
    CVE-2022-2660 (CVSS 9.8) — Delta Industrial Automation DIALink versions 1.4.0.0 and prior are vulnerable to the use of a hard-coded crypt…
    CVE-2022-2969 (CVSS 8.1) — Delta Industrial Automation DIALink versions prior to v1.5.0.0 Beta 4 uses an external input to construct a pa…
    CVE-2021-38488 (CVSS 5.5) — Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenti…
    CVE-2021-38416 (CVSS 7.8) — Delta Electronics DIALink versions 1.2.4.0 and prior insecurely loads libraries, which may allow an attacker t…
    CVE-2021-38428 (CVSS 5.5) — Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenti…
    CVE-2021-38420 (CVSS 7.8) — Delta Electronics DIALink versions 1.2.4.0 and prior default permissions give extensive permissions to low-pri…
    CVE-2021-38407 (CVSS 5.5) — Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenti…
    CVE-2021-38403 (CVSS 5.5) — Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenti…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High