CVE Feed

    Dashboard / CVE / CVE-2022-2969

    CVE-2022-2969

    Delta Industrial Automation DIALink versions prior to v1.5.0.0 Beta 4 uses an external input to construct a pathname intended to identify a file or directory located underneath a restricted parent directory. However, the software does not properly neutralize special elements within the pathname, which can cause the pathname to resolve to a location outside of the restricted directory.

    Published:Dec 1, 2022
    Last Modified:Apr 16, 2025
    EPS:Dec 1, 2022
    EPSS Score:0.00085
    CVSS Score:8.1

    Affected Products

    Vendor
    Deltaww
    Product
    Dialink

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-58320 (CVSS 7.3) — Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability.…
    CVE-2025-58321 (CVSS 10) — Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability.…
    CVE-2022-2660 (CVSS 9.8) — Delta Industrial Automation DIALink versions 1.4.0.0 and prior are vulnerable to the use of a hard-coded crypt…
    CVE-2021-38488 (CVSS 5.5) — Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenti…
    CVE-2021-38416 (CVSS 7.8) — Delta Electronics DIALink versions 1.2.4.0 and prior insecurely loads libraries, which may allow an attacker t…
    CVE-2021-38428 (CVSS 5.5) — Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenti…
    CVE-2021-38420 (CVSS 7.8) — Delta Electronics DIALink versions 1.2.4.0 and prior default permissions give extensive permissions to low-pri…
    CVE-2021-38407 (CVSS 5.5) — Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenti…
    CVE-2021-38424 (CVSS 5.9) — The tag interface of Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to an attacker injecti…
    CVE-2021-38403 (CVSS 5.5) — Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenti…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High