Approved changes feed: RSS · Atom

cpe:2.3:a:deltaww:dialink:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDeltaww (ad3e3879-744a-547a-8a68-13ba5faaf0a4)
ProductDialink (b53a139c-6779-54fd-ba29-e22803891c8f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-58321 vulnerable 2026-06-08 07:35:17.691364 DIALink - Directory Traversal Authentication Bypass Vulnerability
CRITICAL (10)
Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability.
Published: 2025-09-11T08:50:12.379Z
Updated: 2025-09-11T14:36:18.886Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58320 vulnerable 2026-06-08 07:35:17.690968 DIALink - Directory Traversal Authentication Bypass Vulnerability
HIGH (7.3)
Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability.
Published: 2025-09-11T08:51:49.981Z
Updated: 2025-09-11T14:36:13.786Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2969 vulnerable 2026-06-08 05:43:36.811963 ICSA-22-307-03 Delta Industrial Automation DIALink Path traversal
HIGH (8.1)
Delta Industrial Automation DIALink versions prior to v1.5.0.0 Beta 4 uses an external input to construct a pathname intended to identify a file or directory located underneath a restricted parent directory. However, the software does not properly neutralize special elements within the pathname, which can cause the pathname to resolve to a location outside of the restricted directory.
Published: 2022-12-01T17:08:19.327Z
Updated: 2025-04-16T16:05:33.867Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2660 vulnerable 2026-06-08 05:43:35.979005 Details available
CRITICAL (9.8)
Delta Industrial Automation DIALink versions 1.4.0.0 and prior are vulnerable to the use of a hard-coded cryptographic key which could allow an attacker to decrypt sensitive data and compromise the machine.
Published: 2022-12-13T21:26:57.865Z
Updated: 2025-04-16T16:04:37.830Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38488 vulnerable 2026-06-08 05:33:47.404522 Delta Electronics DIALink
MEDIUM (5.5)
Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenticated attacker can inject arbitrary JavaScript code into the parameter comment of the API events, which may allow an attacker to remotely execute code.
Published: 2021-11-03T19:05:54.595Z
Updated: 2024-09-17T03:13:03.362Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38428 vulnerable 2026-06-08 05:33:47.314362 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38424 vulnerable 2026-06-08 05:33:47.299289 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38422 vulnerable 2026-06-08 05:33:47.286164 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38420 vulnerable 2026-06-08 05:33:47.284971 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38418 vulnerable 2026-06-08 05:33:47.283660 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38416 vulnerable 2026-06-08 05:33:47.280221 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38411 vulnerable 2026-06-08 05:32:56.050416 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38407 vulnerable 2026-06-08 05:32:56.035751 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38403 vulnerable 2026-06-08 05:32:56.030813 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.