CVE-2021-38422— Delta Electronics DIALink

Quick assessment

Copy summary Copy citation

Affected

Delta Electronics DIALink

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Delta Electronics DiaLink是中国Delta Electronics公司的用于为从数控机床和 PLC 控制的设备采集现场设备运行数据，为上层管理系统提供统一接口，实现数据可视化，有效揭示生产参数和运行状态。 Delta Electronics DIALink 存在安全漏洞，该漏洞源于受影响的产品以明文形式存储敏感信息，这可能允许攻击者广泛访问应用程序目录并提升权限。

CVE-2021-38422 affects Delta Electronics DIALink. No confirmed in-the-wild exploitation; assess based on exposure. Delta Electronics DiaLink是中国Delta Electronics公司的用于为从数控机床和 PLC 控制的设备采集现场设备运行数据，为上层管理系统提供统一接口，实现数据可视化，有效揭示生产参数和运行状态。 Delta Electronics DIALink 存在安全漏洞，该漏洞源于受影响的产品以明文形式存储敏感信息，这可能允许攻击者广 CVE-2021-38422 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2021-38422

I. Basic Information for CVE-2021-38422

Affected Products

II. Public POCs for CVE-2021-38422

III. Intelligence Information for CVE-2021-38422

Vendor Advisories for CVE-2021-38422 (1)

• https://us-cert.cisa.gov/ics/advisories/icsa-21-294-02 x_refsource_MISC

• https://www.cve.org/CVERecord?id=CVE-2021-38422

Same Patch Batch · Delta Electronics · 2021-11-03 · 10 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2021-38422