CVE-2021-38424— Delta Electronics DIALink

Quick assessment

Copy summary Copy citation

Affected

Delta Electronics DIALink

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Delta Electronics DiaLink是中国Delta Electronics公司的用于为从数控机床和 PLC 控制的设备采集现场设备运行数据，为上层管理系统提供统一接口，实现数据可视化，有效揭示生产参数和运行状态。 Delta Electronics DIALink 存在安全漏洞，攻击者可以将公式注入标签数据，然后可以在用电子表格应用程序打开时执行这些公式。

CVE-2021-38424 affects Delta Electronics DIALink. No confirmed in-the-wild exploitation; assess based on exposure. Delta Electronics DiaLink是中国Delta Electronics公司的用于为从数控机床和 PLC 控制的设备采集现场设备运行数据，为上层管理系统提供统一接口，实现数据可视化，有效揭示生产参数和运行状态。 Delta Electronics DIALink 存在安全漏洞，攻击者可以将公式注入标签数据，然后可以在用电子表格应用程序打开时 CVE-2021-38424 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2021-38424

I. Basic Information for CVE-2021-38424

Affected Products

II. Public POCs for CVE-2021-38424

III. Intelligence Information for CVE-2021-38424

Vendor Advisories for CVE-2021-38424 (1)

• https://us-cert.cisa.gov/ics/advisories/icsa-21-294-02 x_refsource_MISC

• https://www.cve.org/CVERecord?id=CVE-2021-38424

Same Patch Batch · Delta Electronics · 2021-11-03 · 10 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2021-38424