Approved changes feed: RSS · Atom

cpe:2.3:a:delta_electronics:dialink:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDelta Electronics (602ce746-0540-56a8-8888-ddeb939a1a97)
ProductDialink (d4392625-31ae-5d51-9ee6-087aeb158cc1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-58321 vulnerable 2026-06-08 07:35:17.691323 DIALink - Directory Traversal Authentication Bypass Vulnerability
CRITICAL (10)
Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability.
Published: 2025-09-11T08:50:12.379Z
Updated: 2025-09-11T14:36:18.886Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58320 vulnerable 2026-06-08 07:35:17.689910 DIALink - Directory Traversal Authentication Bypass Vulnerability
HIGH (7.3)
Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability.
Published: 2025-09-11T08:51:49.981Z
Updated: 2025-09-11T14:36:13.786Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38488 vulnerable 2026-06-08 05:33:47.404477 Delta Electronics DIALink
MEDIUM (5.5)
Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenticated attacker can inject arbitrary JavaScript code into the parameter comment of the API events, which may allow an attacker to remotely execute code.
Published: 2021-11-03T19:05:54.595Z
Updated: 2024-09-17T03:13:03.362Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38428 vulnerable 2026-06-08 05:33:47.314321 Delta Electronics DIALink
MEDIUM (5.5)
Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenticated attacker can inject arbitrary JavaScript code into the parameter name of the API schedule, which may allow an attacker to remotely execute code.
Published: 2021-11-03T19:05:41.591Z
Updated: 2024-09-17T02:56:47.240Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38424 vulnerable 2026-06-08 05:33:47.299247 Delta Electronics DIALink
MEDIUM (5.9)
The tag interface of Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to an attacker injecting formulas into the tag data. Those formulas may then be executed when it is opened with a spreadsheet application.
Published: 2021-11-03T19:05:22.305Z
Updated: 2024-09-16T20:41:42.309Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38422 vulnerable 2026-06-08 05:33:47.286129 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38420 vulnerable 2026-06-08 05:33:47.284936 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38418 vulnerable 2026-06-08 05:33:47.283619 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38416 vulnerable 2026-06-08 05:33:47.279092 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38411 vulnerable 2026-06-08 05:32:56.050296 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38407 vulnerable 2026-06-08 05:32:56.035715 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38403 vulnerable 2026-06-08 05:32:56.030266 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.