Skip to content
OpenAdvisories

Vendor

Delta Electronics

228 known vulnerabilities.

Products

DIAEnergie 69 InfraSuite Device Master 31 CNCSoft-G2 14 DIAScreen 14 DOPSoft 12 DIALink 12 CNCSoft 8 ISPSoft 7 ASDA-Soft 5 DIAView 5 DVP-12SE11T 4 Delta UFC500 4 COMMGR 3 DRASimuCAD 3 TPEditor 3 Delta Industrial Automation DOPSoft 3 DOPSoft 2 3 WPLSoft 3 CNCSoft-B DOPSoft 2 DTM Soft 2 CNCSoft ScreenEditor 2 Delta Industrial Automation TPEditor 2 DTN Soft 2 DMARS 1 Delta Industrial Automation PMSoft 1 Delta Robot Automation Studio (DRAS) 1 DVP15MC11T 1 DVP32ES2 PLC 1 DX-2100-L1-CN 1 DVP-12SE 1 CNCSoft-B 1 CNCSoft-B v1.0.0.4 DOPSoft 1 Automation TPEditor 1 PMSoft 1 DIAEnergy 1 CNCSoft-G2 DOPSoft 1 EIP Builder 1 Industrial Automation DIALink 1 DX-3021L9 0 COMMGR (Version 1) 0
All Critical High Medium Low Exploited only Public exploit

52 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-26666

    Delta Electronics DIAEnergie SQL Injection in HandlerDialogECC.ashx

    Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerECC.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

    Delta Electronics DIAEnergie ICS / OT
  • Critical 9.8
    CVE-2022-26887

    Delta Electronics DIAEnergie SQL Injection in DIAE_HandlerTag_KID.ashx

    Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_loopmapHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system comm…

    Delta Electronics DIAEnergie ICS / OT
  • Critical 9.8
    CVE-2022-26836

    Delta Electronics DIAEnergie SQL Injection in HandlerExport.ashx/Calendar.ashx

    Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerExport.ashx/Calendar. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute sys…

    Delta Electronics DIAEnergie ICS / OT
  • Critical 9.8
    CVE-2022-26349

    Delta Electronics DIAEnergie SQL Injection in DIAE_eccoefficientHandler.ashx

    Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_eccoefficientHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute …

    Delta Electronics DIAEnergie ICS / OT
  • Critical 9.8
    CVE-2022-26065

    Delta Electronics DIAEnergie SQL Injection in GetLatestDemandNode and GetDemandAnalysisData

    Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in GetLatestDemandNode. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

    Delta Electronics DIAEnergie ICS / OT
  • Critical 9.8
    CVE-2022-26013

    Delta Electronics DIAEnergie SQL Injection in DIAE_dmdsetHandler.ashx

    Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_dmdsetHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system …

    Delta Electronics DIAEnergie ICS / OT
  • Critical 9.8
    CVE-2022-25880

    Delta Electronics DIAEnergie SQL Injection in DIAE_hierarchyHandler.ashx

    Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerTag_KID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

    Delta Electronics DIAEnergie ICS / OT
  • Critical 9.8
    CVE-2022-0923

    Delta Electronics DIAEnergie SQL Injection in HandlerDialog_KID.ashx

    Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerDialog_KID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system c…

    Delta Electronics DIAEnergie ICS / OT
  • Critical 9.8
    CVE-2022-26069

    Delta Electronics DIAEnergie SQL Injection in HandlerPage_KID.ashx

    Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerPage_KID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system com…

    Delta Electronics DIAEnergie ICS / OT
  • Critical 9.8
    CVE-2022-25347 EPSS 11%

    Delta Electronics DIAEnergie Path Traversal

    Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) is vulnerable to path traversal attacks, which may allow an attacker to write arbitrary files to locations on the file system.

    Delta Electronics DIAEnergie ICS / OT
  • Critical 9.8
    CVE-2022-25980

    Delta Electronics DIAEnergie SQL Injection in HandlerCommon.ashx

    Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerCommon.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system comma…

    Delta Electronics DIAEnergie ICS / OT
  • Critical 9.8
    CVE-2022-26059

    Delta Electronics DIAEnergie SQL Injection in GetQueryData

    Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetQueryData. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

    Delta Electronics DIAEnergie ICS / OT