Deltaww
29 CVEs across 71 Deltaww products. Browse Deltaww vulnerabilities, severities, and proof-of-concept exploits.
Deltaww products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-12577 | | 2026-07-01 | DVP80ES3 with Improperly Implemented Security Check for Standard vulnerability. | |
CVE-2026-12576 | High | 7.5 | 2026-07-01 | DVP80ES3 with Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability. |
CVE-2026-12575 | High | 7.5 | 2026-07-01 | DVP80ES3 with Improper Resource Shutdown or Release vulnerability. |
CVE-2026-14193 | High | 7.5 | 2026-07-01 | DVP80ES300T with Improper Validation of Array Index Vulnerability |
CVE-2026-12579 | High | 7.4 | 2026-07-01 | AS228T with Authentication Bypass Vulnerability |
CVE-2026-12578 | | 2026-06-30 | The affected product is vulnerable to a deserialization of untrusted data, which may allow an attacker to execute arbitrary code. | |
CVE-2026-12819 | | 2026-06-30 | Delta Electronics DVP12SE PLC exposes a Modbus TCP service over a specified port without authentication or access control, permitting unauthenticated interacti… | |
CVE-2026-12818 | | 2026-06-30 | Delta Electronics DVP12SE PLCs are susceptible to a resource allocation vulnerability without limits or throttling (CWE-770) within their Modbus TCP service. | |
CVE-2026-1952 | Critical | 9.8 | 2026-04-24 | Delta Electronics AS320T has denial of service via the undocumented subfunction vulnerability. |
CVE-2026-1951 | Critical | 9.8 | 2026-04-24 | Delta Electronics AS320T has no checking of the length of the buffer with the directory name vulnerability. |
CVE-2026-1950 | Critical | 9.8 | 2026-04-24 | Delta Electronics AS320T has No checking of the length of the buffer with the file name vulnerability. |
CVE-2026-1949 | Critical | 9.8 | 2026-04-24 | Delta Electronics AS320T has incorrect calculation of the buffer size on the stack in the GET/PUT request handler of the web service. |
CVE-2026-5726 | High | 7.8 | 2026-04-08 | ASDA-Soft Stack-based Buffer Overflow Vulnerability |
CVE-2026-3631 | High | 7.5 | 2026-03-09 | Delta Electronics COMMGR2 has Buffer Over-read DoS vulnerability. |
CVE-2026-3630 | Critical | 9.8 | 2026-03-09 | Delta Electronics COMMGR2 has Stack-based Buffer Overflow vulnerability. |
CVE-2026-3094 | High | 7.8 | 2026-03-04 | Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability t… |
CVE-2026-1361 | High | 7.8 | 2026-01-27 | ASDA-Soft Stack-based Buffer Overflow Vulnerability |
CVE-2026-0975 | High | 7.8 | 2026-01-16 | Delta Electronics DIAView has Command Injection vulnerability. |
CVE-2025-62582 | Critical | 9.8 | 2026-01-16 | Delta Electronics DIAView has multiple vulnerabilities. |
CVE-2025-62581 | Critical | 9.8 | 2026-01-16 | Delta Electronics DIAView has multiple vulnerabilities. |
CVE-2025-15359 | Critical | 9.1 | 2025-12-30 | DVP-12SE11T - Out-of-bound memory write Vulnerability |
CVE-2025-15358 | High | 7.5 | 2025-12-30 | DVP-12SE11T - Denial of Service Vulnerability |
CVE-2025-15103 | High | 8.1 | 2025-12-30 | DVP-12SE11T - Authentication Bypass via Partial Password Disclosure |
CVE-2025-15102 | Critical | 9.1 | 2025-12-30 | DVP-12SE11T - Password Protection Bypass |
CVE-2025-62578 | High | 7.5 | 2025-12-26 | DVP-12SE - Modbus/TCP Cleartext Transmission of Sensitive Information |
CVE-2025-59301 | Medium | 4.0 | 2025-12-22 | Delta Electronics DVP15MC11T lacks proper validation of the modbus/tcp packets and can lead to denial of service. |
CVE-2025-62580 | High | 7.8 | 2025-10-16 | ASDA-Soft Stack-based Buffer Overflow Vulnerability |
CVE-2025-62579 | High | 7.8 | 2025-10-16 | ASDA-Soft Stack-based Buffer Overflow Vulnerability |
CVE-2025-59300 | High | 7.8 | 2025-10-03 | Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to… |
CVE-2025-59299 | High | 7.8 | 2025-10-03 | Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to… |
CVE-2025-59298 | High | 7.8 | 2025-10-03 | Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to… |
CVE-2025-59297 | High | 7.8 | 2025-10-03 | Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to… |
CVE-2025-58319 | High | 7.8 | 2025-09-24 | Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability t… |
CVE-2025-58317 | High | 7.8 | 2025-09-24 | Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability t… |
CVE-2025-58321 | Critical | 10.0 | 2025-09-11 | Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability. |
CVE-2025-58320 | High | 7.3 | 2025-09-11 | Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability. |
CVE-2025-57703 | Medium | 6.1 | 2025-08-18 | DIAEnergie - Reflected Cross-site Scripting |
CVE-2025-57702 | Medium | 6.1 | 2025-08-18 | DIAEnergie - Reflected Cross-site Scripting |
CVE-2025-57701 | Medium | 6.1 | 2025-08-18 | DIAEnergie - Reflected Cross-site Scripting |
CVE-2025-57700 | Medium | 6.1 | 2025-08-18 | DIAEnergie - Stored Cross-site Scripting |
CVE-2025-47728 | High | 7.3 | 2025-06-04 | Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability t… |
CVE-2025-47727 | High | 7.3 | 2025-06-04 | Delta Electronics CNCSoft lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to e… |
CVE-2025-47726 | High | 7.3 | 2025-06-04 | Delta Electronics CNCSoft lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to e… |
CVE-2025-47725 | High | 7.3 | 2025-06-04 | Delta Electronics CNCSoft lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to e… |
CVE-2025-47724 | High | 7.3 | 2025-06-04 | Delta Electronics CNCSoft lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to e… |
CVE-2025-4125 | High | 7.8 | 2025-04-30 | Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitrary code when parsin… |
CVE-2025-4124 | High | 7.8 | 2025-04-30 | Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitrary code when parsin… |
CVE-2025-22884 | High | 7.8 | 2025-04-30 | Delta Electronics ISPSoft version 3.20 is vulnerable to a Stack-Based buffer overflow vulnerability that could allow an attacker to execute arbitrary code when… |
CVE-2025-22883 | High | 7.8 | 2025-04-30 | Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitrary code when parsin… |
CVE-2025-22882 | High | 7.8 | 2025-04-30 | Delta Electronics ISPSoft version 3.20 is vulnerable to a Stack-Based buffer overflow vulnerability that could allow an attacker to leverage debugging logic to… |
CVE-2025-22881 | High | 7.8 | 2025-02-26 | Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target v… |
CVE-2025-22880 | High | 7.8 | 2025-02-07 | Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target v… |
CVE-2024-12836 | High | 7.8 | 2024-12-30 | Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitra… |
CVE-2024-12835 | High | 7.8 | 2024-12-30 | Delta Electronics DRASimuCAD ICS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute ar… |
CVE-2024-12834 | High | 7.8 | 2024-12-30 | Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitra… |
CVE-2024-47131 | High | 7.8 | 2024-11-11 | If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetObjec… |
CVE-2024-39605 | High | 7.8 | 2024-11-11 | If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetParam… |
CVE-2024-39354 | High | 7.8 | 2024-11-11 | If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in CEtherIPTag… |
CVE-2024-47966 | High | 7.8 | 2024-10-10 | Delta Electronics CNCSoft-G2 lacks proper initialization of memory prior to accessing it. An attacker can manipulate users to visit a malicious page or file to… |
CVE-2024-47965 | High | 7.8 | 2024-10-10 | Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can man… |
CVE-2024-47964 | High | 7.8 | 2024-10-10 | Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker c… |
CVE-2024-47963 | High | 7.8 | 2024-10-10 | Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can ma… |
CVE-2024-47962 | High | 7.8 | 2024-10-10 | Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker… |
CVE-2024-43699 | Critical | 9.8 | 2024-10-03 | Delta Electronics DIAEnergie is vulnerable to an SQL injection in the script AM_RegReport.aspx. An unauthenticated attacker may be able to exploit this issue t… |
CVE-2024-42417 | High | 8.8 | 2024-10-03 | Delta Electronics DIAEnergie is vulnerable to an SQL injection in the script Handler_CFG.ashx. An authenticated attacker may be able to exploit this issue to c… |
CVE-2024-8255 | Critical | 9.8 | 2024-08-29 | Delta Electronics DTN Soft version 2.0.1 and prior are vulnerable to an attacker achieving remote code execution through a deserialization of untrusted data vu… |
CVE-2024-7502 | High | 7.8 | 2024-08-06 | A crafted DPA file could force Delta Electronics DIAScreen to overflow a stack-based buffer, which could allow an attacker to execute arbitrary code. |
CVE-2024-39883 | High | 8.8 | 2024-07-09 | Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target v… |
CVE-2024-39882 | High | 8.8 | 2024-07-09 | Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. If a target visits… |
CVE-2024-39881 | High | 8.8 | 2024-07-09 | Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a memory corruption condition. If a target visits a malicious p… |
CVE-2024-39880 | High | 7.8 | 2024-07-09 | Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. If a target… |
CVE-2024-4549 | High | 7.5 | 2024-05-06 | A denial of service vulnerability exists in Delta Electronics DIAEnergie v1.10.1.8610 and prior. When processing an 'ICS Restart!' message, CEBC.exe restarts t… |
CVE-2024-4548 | Critical | 9.8 | 2024-05-06 | An SQLi vulnerability exists in Delta Electronics DIAEnergie v1.10.1.8610 and prior when CEBC.exe processes a 'RecalculateHDMWYC' message, which is split into… |
CVE-2024-4547 | Critical | 9.8 | 2024-05-06 | A SQLi vulnerability exists in Delta Electronics DIAEnergie v1.10.1.8610 and prior when CEBC.exe processes a 'RecalculateScript' message, which is splitted int… |
CVE-2024-34033 | High | 8.8 | 2024-05-03 | Delta Electronics DIAEnergie has insufficient input validation which makes it possible to perform a path traversal attack and write outside of the intended di… |
CVE-2024-34032 | High | 8.8 | 2024-05-03 | Delta Electronics DIAEnergie is vulnerable to an SQL injection vulnerability that exists in the GetDIACloudList endpoint. An authenticated attacker can exploi… |
CVE-2024-34031 | High | 8.8 | 2024-05-03 | Delta Electronics DIAEnergie is vulnerable to an SQL injection vulnerability that exists in the script Handler_CFG.ashx. An authenticated attacker can exploit… |
CVE-2024-4192 | High | 7.8 | 2024-04-30 | Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker… |
CVE-2024-25574 | High | 8.8 | 2024-04-01 | SQL injection vulnerability exists in GetDIAE_usListParameters. |
CVE-2024-28171 | High | 8.1 | 2024-03-21 | It is possible to perform a path traversal attack and write outside of the intended directory. If a file name is specified that already exists on the file sys… |
CVE-2024-28045 | Medium | 4.6 | 2024-03-21 | Improper neutralization of input within the affected product could lead to cross-site scripting. |
CVE-2024-28040 | High | 8.8 | 2024-03-21 | SQL injection vulnerability exists in GetDIAE_astListParameters. |
CVE-2024-25567 | High | 8.1 | 2024-03-21 | Path traversal attack is possible and write outside of the intended directory and may access sensitive information. If a file name is specified that already e… |
CVE-2024-23975 | High | 8.8 | 2024-03-21 | SQL injection vulnerability exists in GetDIAE_slogListParameters. |
CVE-2024-23494 | High | 8.8 | 2024-03-21 | SQL injection vulnerability exists in GetDIAE_unListParameters. |
CVE-2024-28891 | High | 8.8 | 2024-03-21 | SQL injection vulnerability exists in the script Handler_CFG.ashx. |
CVE-2024-28029 | High | 8.8 | 2024-03-21 | Privileges are not fully verified server-side, which can be abused by a user with limited privileges to bypass authorization and access privileged functionalit… |
CVE-2024-25937 | High | 8.8 | 2024-03-21 | SQL injection vulnerability exists in the script DIAE_tagHandler.ashx. |
CVE-2024-1941 | High | 7.8 | 2024-03-01 | Delta Electronics CNCSoft-B versions 1.0.0.4 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code… |
CVE-2024-1595 | High | 7.8 | 2024-02-29 | Delta Electronics CNCSoft-B DOPSoft prior to v4.0.0.82 insecurely loads libraries, which may allow an attacker to use DLL hijacking and take over the system… |
CVE-2023-5131 | High | 8.2 | 2024-01-18 | A heap buffer-overflow exists in Delta Electronics ISPSoft. An anonymous attacker can exploit this vulnerability by enticing a user to open a specially crafted… |
CVE-2023-5130 | High | 8.2 | 2024-01-18 | A buffer overflow vulnerability exists in Delta Electronics WPLSoft. An anonymous attacker can exploit this vulnerability by enticing a user to open a speciall… |
CVE-2023-43824 | High | 8.8 | 2024-01-18 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wTitleTextLen field of a DPS file. A remote, una… |
CVE-2023-43823 | High | 8.8 | 2024-01-18 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wTTitleLen field of a DPS file. A remote, unauth… |
CVE-2023-43822 | High | 8.8 | 2024-01-18 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesTimeLen field of a DPS file. A remote… |
CVE-2023-43821 | High | 8.8 | 2024-01-18 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesActionLen field of a DPS file. A remot… |
CVE-2023-43820 | High | 8.8 | 2024-01-18 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesPrevValueLen field of a DPS file. A re… |
CVE-2023-43819 | High | 8.8 | 2024-01-18 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the InitialMacroLen field of a DPS file. A remote, u… |
CVE-2023-43818 | High | 8.8 | 2024-01-18 | A buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft. A remote, unauthenticated attacker can exploit this vulnerability by enticin… |
CVE-2023-43817 | High | 7.5 | 2024-01-18 | A buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft version 2 when parsing the wMailContentLen field of a DPS file. An anonymous… |