# cve.now: Delta Electronics

The newest entries naming Delta Electronics as an affected vendor (up to 200), of 228 in all, 1 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-22110](https://cve.now/CVE-2026-22110.md): Missing authentication check on POST/PUT requests (CVSS 8.7)
- [CVE-2026-22105](https://cve.now/CVE-2026-22105.md): Use of default password based on serial number (CVSS 8.7)
- [CVE-2026-22109](https://cve.now/CVE-2026-22109.md): Default WebUI passwords stored in plaintext (CVSS 8.4)
- [CVE-2026-22114](https://cve.now/CVE-2026-22114.md): Missing brute-force protection for web interface (CVSS 5.3)
- [CVE-2026-1361](https://cve.now/CVE-2026-1361.md): ASDA-Soft Stack-based Buffer Overflow Vulnerability (CVSS 7.8)
- [CVE-2026-0975](https://cve.now/CVE-2026-0975.md): DIAView - Command Injection Vulnerability (CVSS 7.8)
- [CVE-2025-62581](https://cve.now/CVE-2025-62581.md): DIAView - Authentication Bypass Vulnerability (CVSS 9.8)
- [CVE-2025-62582](https://cve.now/CVE-2025-62582.md): DIAView - Authentication Bypass Vulnerability (CVSS 9.8)
- [CVE-2025-15359](https://cve.now/CVE-2025-15359.md): DVP-12SE11T - Out-of-bound memory write Vulnerability (CVSS 9.1)
- [CVE-2025-15358](https://cve.now/CVE-2025-15358.md): DVP-12SE11T - Denial of Service Vulnerability (CVSS 7.5)
- [CVE-2025-15103](https://cve.now/CVE-2025-15103.md): DVP-12SE11T - Authentication Bypass via Partial Password Disclosure (CVSS 8.1)
- [CVE-2025-15102](https://cve.now/CVE-2025-15102.md): DVP-12SE11T - Password Protection Bypass (CVSS 9.1)
- [CVE-2025-62578](https://cve.now/CVE-2025-62578.md): DVP-12SE - Modbus/TCP Cleartext Transmission of Sensitive Information (CVSS 7.2)
- [CVE-2025-59301](https://cve.now/CVE-2025-59301.md): Modbus/TCP Dos Vulnerability in DVP15MC11T (CVSS 4.0)
- [CVE-2025-62580](https://cve.now/CVE-2025-62580.md): ASDA-Soft Stack-based Buffer Overflow Vulnerability (CVSS 7.8)
- [CVE-2025-62579](https://cve.now/CVE-2025-62579.md): ASDA-Soft Stack-based Buffer Overflow Vulnerability (CVSS 7.8)
- [CVE-2025-59300](https://cve.now/CVE-2025-59300.md): File Parsing Out-Of-Bounds Write Vulnerability in DIAScreen (CVSS 6.8)
- [CVE-2025-59299](https://cve.now/CVE-2025-59299.md): File Parsing Out-Of-Bounds Write Vulnerability in DIAScreen (CVSS 6.8)
- [CVE-2025-59298](https://cve.now/CVE-2025-59298.md): File Parsing Out-Of-Bounds Write Vulnerability in DIAScreen (CVSS 6.8)
- [CVE-2025-59297](https://cve.now/CVE-2025-59297.md): File Parsing Out-Of-Bounds Write Vulnerability in DIAScreen (CVSS 6.8)
- [CVE-2025-58319](https://cve.now/CVE-2025-58319.md): File Parsing Memory Corruption in CNCSoft-G2 (CVSS 7.8)
- [CVE-2025-58317](https://cve.now/CVE-2025-58317.md): File Parsing Memory Corruption in CNCSoft-G2 (CVSS 7.8)
- [CVE-2025-58320](https://cve.now/CVE-2025-58320.md): DIALink - Directory Traversal Authentication Bypass Vulnerability (CVSS 7.3)
- [CVE-2025-58321](https://cve.now/CVE-2025-58321.md): DIALink - Directory Traversal Authentication Bypass Vulnerability (CVSS 10.0)
- [CVE-2025-58318](https://cve.now/CVE-2025-58318.md): DIAView - Authentication Bypass Vulnerability (CVSS 5.8)
- [CVE-2025-53419](https://cve.now/CVE-2025-53419.md): COMMGR Code Injection Vulnerability (CVSS 7.8)
- [CVE-2025-53418](https://cve.now/CVE-2025-53418.md): COMMGR Stack-based Buffer Overflow Vulnerability (CVSS 8.6)
- [CVE-2025-57704](https://cve.now/CVE-2025-57704.md): EIP Builder XML External Entity Processing Information Disclosure Vulnerability (CVSS 5.5)
- [CVE-2025-57703](https://cve.now/CVE-2025-57703.md): Reflected Cross-site Scripting in DIAEnergie (CVSS 5.9)
- [CVE-2025-57702](https://cve.now/CVE-2025-57702.md): Reflected Cross-site Scripting in DIAEnergie (CVSS 5.9)
- [CVE-2025-57701](https://cve.now/CVE-2025-57701.md): Reflected Cross-site Scripting in DIAEnergie (CVSS 5.9)
- [CVE-2025-57700](https://cve.now/CVE-2025-57700.md): Stored Cross-site Scripting in DIAEnergie (CVSS 7.0)
- [CVE-2025-53417](https://cve.now/CVE-2025-53417.md): File Parsing Deserialization of Untrusted Data in DTM Soft (CVSS 9.3)
- [CVE-2025-53416](https://cve.now/CVE-2025-53416.md): File Parsing Deserialization of Untrusted Data in DTN Soft (CVSS 7.8)
- [CVE-2025-53415](https://cve.now/CVE-2025-53415.md): File Parsing Deserialization of Untrusted Data in DTM Soft (CVSS 7.8)
- [CVE-2025-47728](https://cve.now/CVE-2025-47728.md): File Parsing Memory Corruption in CNCSoft-G2 (CVSS 7.3)
- [CVE-2025-47727](https://cve.now/CVE-2025-47727.md): Out-of-bounds Write in CNCSoft (CVSS 7.3)
- [CVE-2025-47726](https://cve.now/CVE-2025-47726.md): Out-of-bounds Write in CNCSoft (CVSS 7.3)
- [CVE-2025-47725](https://cve.now/CVE-2025-47725.md): Out-of-bounds Write in CNCSoft (CVSS 7.3)
- [CVE-2025-47724](https://cve.now/CVE-2025-47724.md): Out-of-bounds Write in CNCSoft (CVSS 7.3)
- [CVE-2025-4125](https://cve.now/CVE-2025-4125.md): ISPSoft File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2025-4124](https://cve.now/CVE-2025-4124.md): ISPSoft File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2025-22884](https://cve.now/CVE-2025-22884.md): ISPSoft File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2025-22883](https://cve.now/CVE-2025-22883.md): ISPSoft File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2025-22882](https://cve.now/CVE-2025-22882.md): ISPSoft File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2025-3495](https://cve.now/CVE-2025-3495.md): COMMGR - Insufficient Randomization Authentication Bypass (CVSS 9.8)
- [CVE-2025-22881](https://cve.now/CVE-2025-22881.md): Heap-based Buffer Overflow in CNCSoft-G2 (CVSS 8.4)
- [CVE-2025-22880](https://cve.now/CVE-2025-22880.md): Heap-based Buffer Overflow in CNCSoft-G2 (CVSS 7.8)
- [CVE-2024-12836](https://cve.now/CVE-2024-12836.md): Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2024-12835](https://cve.now/CVE-2024-12835.md): Delta Electronics DRASimuCAD ICS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2024-12834](https://cve.now/CVE-2024-12834.md): Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2024-12677](https://cve.now/CVE-2024-12677.md): Delta Electronics DTM Soft Deserialization of Untrusted Data (CVSS 7.8)
- [CVE-2024-39354](https://cve.now/CVE-2024-39354.md): Delta Electronics DIAScreen Stack-based Buffer Overflow (CVSS 7.8)
- [CVE-2024-39605](https://cve.now/CVE-2024-39605.md): Delta Electronics DIAScreen Stack-based Buffer Overflow (CVSS 7.8)
- [CVE-2024-47131](https://cve.now/CVE-2024-47131.md): Delta Electronics DIAScreen Stack-based Buffer Overflow (CVSS 7.8)
- [CVE-2024-10456](https://cve.now/CVE-2024-10456.md): Delta Electronics InfraSuite Device Master Deserialization of Untrusted Data (CVSS 9.3)
- [CVE-2024-47966](https://cve.now/CVE-2024-47966.md): Use of Uninitialized Variable vulnerability in Delta Electronics CNCSoft-G2 (CVSS 8.4)
- [CVE-2024-47965](https://cve.now/CVE-2024-47965.md): Out-of-bounds Read vulnerability in Delta Electronics CNCSoft-G2 (CVSS 8.4)
- [CVE-2024-47964](https://cve.now/CVE-2024-47964.md): Heap-based Buffer Overflow vulnerability in Delta Electronics CNCSoft-G2 (CVSS 8.4)
- [CVE-2024-47963](https://cve.now/CVE-2024-47963.md): Out-of-bounds Write vulnerability in Delta Electronics CNCSoft-G2 (CVSS 8.4)
- [CVE-2024-47962](https://cve.now/CVE-2024-47962.md): Stack-based Buffer Overflow vulnerability in Delta Electronics CNCSoft-G2 (CVSS 8.4)
- [CVE-2024-42417](https://cve.now/CVE-2024-42417.md): Delta Electronics DIAEnergie SQL Injection (CVSS 8.8)
- [CVE-2024-43699](https://cve.now/CVE-2024-43699.md): Delta Electronics DIAEnergie SQL Injection (CVSS 9.8)
- [CVE-2024-8255](https://cve.now/CVE-2024-8255.md): Path Traversal in Ocean Data Systems Dream Report (CVSS 8.4)
- [CVE-2024-7502](https://cve.now/CVE-2024-7502.md): Delta Electronics DIAScreen Stack-Based Buffer Overflow (CVSS 7.8)
- [CVE-2024-39883](https://cve.now/CVE-2024-39883.md): Heap-based Buffer Overflow in Delta Electronics CNCSoft-G2 (CVSS 8.4)
- [CVE-2024-39882](https://cve.now/CVE-2024-39882.md): Out-of-bounds Read in Delta Electronics CNCSoft-G2 (CVSS 8.4)
- [CVE-2024-39881](https://cve.now/CVE-2024-39881.md): Out-of-bounds Write in Delta Electronics CNCSoft-G2 (CVSS 8.4)
- [CVE-2024-39880](https://cve.now/CVE-2024-39880.md): Stack-based Buffer Overflow in Delta Electronics CNCSoft-G2 (CVSS 8.4)
- [CVE-2024-4549](https://cve.now/CVE-2024-4549.md): Delta Electronics DIAEnergie SQL Injection (CVSS 7.5)
- [CVE-2024-4548](https://cve.now/CVE-2024-4548.md): Delta Electronics DIAEnergie SQL Injection (CVSS 9.8)
- [CVE-2024-4547](https://cve.now/CVE-2024-4547.md): Delta Electronics DIAEnergie Unauthenticated SQL Injection (CVSS 9.8)
- [CVE-2024-34033](https://cve.now/CVE-2024-34033.md): Path Traversal vulnerability in Delta Electronics DIAEnergie (CVSS 8.8)
- [CVE-2024-34031](https://cve.now/CVE-2024-34031.md): SQL Injection vulnerability in Delta Electronics DIAEnergie (CVSS 8.8)
- [CVE-2024-34032](https://cve.now/CVE-2024-34032.md): SQL Injection in Delta Electronics DIAEnergie (CVSS 8.8)
- [CVE-2024-4192](https://cve.now/CVE-2024-4192.md): Stack-based Buffer Overflow vulnerability in Delta Electronics CNCSoft-G2 DOPSoft (CVSS 7.8)
- [CVE-2024-25574](https://cve.now/CVE-2024-25574.md): Delta Electronics DIAEnergie SQL Injection (CVSS 8.8)
- [CVE-2024-28045](https://cve.now/CVE-2024-28045.md): Delta Electronics DIAEnergie Cross-site scripting (CVSS 4.6)
- [CVE-2024-25567](https://cve.now/CVE-2024-25567.md): Delta Electronics DIAEnergie Path traversal (CVSS 8.1)
- [CVE-2024-28171](https://cve.now/CVE-2024-28171.md): Delta Electronics DIAEnergie Path traversal (CVSS 8.1)
- [CVE-2024-23494](https://cve.now/CVE-2024-23494.md): Delta Electronics DIAEnergie SQL injection (CVSS 8.8)
- [CVE-2024-23975](https://cve.now/CVE-2024-23975.md): Delta Electronics DIAEnergie SQL injection (CVSS 8.8)
- [CVE-2024-28040](https://cve.now/CVE-2024-28040.md): Delta Electronics DIAEnergie SQL injection (CVSS 8.8)
- [CVE-2024-25937](https://cve.now/CVE-2024-25937.md): Delta Electronics DIAEnergie SQL injection (CVSS 8.8)
- [CVE-2024-28891](https://cve.now/CVE-2024-28891.md): Delta Electronics DIAEnergie SQL injection (CVSS 8.8)
- [CVE-2024-28029](https://cve.now/CVE-2024-28029.md): Client-Side Enforcement of Server-Side Security in Delta Electronics DIAEnergie (CVSS 8.8)
- [CVE-2024-1941](https://cve.now/CVE-2024-1941.md): Delta Electronics CNCSoft-B Stack-based Buffer Overflow (CVSS 7.8)
- [CVE-2024-1595](https://cve.now/CVE-2024-1595.md): Delta Electronics CNCSoft-B DOPSoft Uncontrolled Search Path Element (CVSS 7.8)
- [CVE-2023-43824](https://cve.now/CVE-2023-43824.md): Delta Electronics Delta Industrial Automation DOPSoft DPS File wTitleTextLen Buffer Overflow Remote Code Execution (CVSS 8.8)
- [CVE-2023-43823](https://cve.now/CVE-2023-43823.md): Delta Electronics Delta Industrial Automation DOPSoft DPS File wTTitleLen Buffer Overflow Remote Code Execution (CVSS 8.8)
- [CVE-2023-43822](https://cve.now/CVE-2023-43822.md): Delta Electronics Delta Industrial Automation DOPSoft DPS File wLogTitlesTimeLen Buffer Overflow Remote Code Execution (CVSS 8.8)
- [CVE-2023-43821](https://cve.now/CVE-2023-43821.md): Delta Electronics Delta Industrial Automation DOPSoft DPS File wLogTitlesActionLen Buffer Overflow Remote Code Execution (CVSS 8.8)
- [CVE-2023-43820](https://cve.now/CVE-2023-43820.md): Delta Electronics Delta Industrial Automation DOPSoft DPS File wLogTitlesPrevValueLen Buffer Overflow Remote Code Execution (CVSS 8.8)
- [CVE-2023-43819](https://cve.now/CVE-2023-43819.md): Delta Electronics Delta Industrial Automation DOPSoft DPS File InitialMacroLen Buffer Overflow Remote Code Execution (CVSS 8.8)
- [CVE-2023-43818](https://cve.now/CVE-2023-43818.md): Delta Electronics Delta Industrial Automation DOPSoft DPS File wTextLen Buffer Overflow Remote Code Execution (CVSS 8.8)
- [CVE-2023-43817](https://cve.now/CVE-2023-43817.md): Delta Electronics Delta Industrial Automation DOPSoft DPS File wMailContentLen Buffer Overflow Remote Code Execution (CVSS 7.5)
- [CVE-2023-43816](https://cve.now/CVE-2023-43816.md): Delta Electronics Delta Industrial Automation DOPSoft DPS File wKPFStringLen Buffer Overflow Remote Code Execution (CVSS 6.3)
- [CVE-2023-43815](https://cve.now/CVE-2023-43815.md): Delta Electronics Delta Industrial Automation DOPSoft DPS File wScreenDESCTextLen Buffer Overflow Remote Code Execution (CVSS 7.1)
- [CVE-2023-5131](https://cve.now/CVE-2023-5131.md): Delta Electronics ISPSoft Heap Buffer-Overflow (CVSS 8.2)
- [CVE-2023-5130](https://cve.now/CVE-2023-5130.md): Delta Electronics WPLSoft Buffer-Overflow (CVSS 8.2)
- [CVE-2023-5944](https://cve.now/CVE-2023-5944.md): Delta Electronics DOPSoft Stack-based Buffer Overflow (CVSS 7.8)
- [CVE-2023-47279](https://cve.now/CVE-2023-47279.md): Delta Electronics InfraSuite Device Master Path Traversal (CVSS 7.5)
- [CVE-2023-47207](https://cve.now/CVE-2023-47207.md): Delta Electronics InfraSuite Device Master Deserialization of Untrusted Data (CVSS 9.8)
- [CVE-2023-46690](https://cve.now/CVE-2023-46690.md): Delta Electronics InfraSuite Device Master Path Traversal (CVSS 8.8)
- [CVE-2023-39226](https://cve.now/CVE-2023-39226.md): Delta Electronics InfraSuite Device Master Exposed Dangerous Method Or Function (CVSS 9.8)
- [CVE-2023-5461](https://cve.now/CVE-2023-5461.md): Delta Electronics WPLSoft Modbus cleartext transmission (CVSS 3.7)
- [CVE-2023-5460](https://cve.now/CVE-2023-5460.md): Delta Electronics WPLSoft Modbus Data Packet heap-based overflow (CVSS 3.5)
- [CVE-2023-5459](https://cve.now/CVE-2023-5459.md): Delta Electronics DVP32ES2 PLC Password Transmission denial of service (CVSS 6.5)
- [CVE-2023-5068](https://cve.now/CVE-2023-5068.md): Delta Electronics DIAScreen Out-of-bounds Write (CVSS 7.8)
- [CVE-2023-30765](https://cve.now/CVE-2023-30765.md): ​Delta Electronics InfraSuite Device Master Improper Access Control (CVSS 8.8)
- [CVE-2023-34316](https://cve.now/CVE-2023-34316.md): Delta Electronics InfraSuite Device Master Improper Access Control (CVSS 6.5)
- [CVE-2023-34347](https://cve.now/CVE-2023-34347.md): ​Delta Electronics InfraSuite Device Master Deserialization of Untrusted Data (CVSS 9.8)
- [CVE-2023-25177](https://cve.now/CVE-2023-25177.md): Delta Electronics CNCSoft-B DOPSoft Stack-based buffer overflow (CVSS 7.8)
- [CVE-2023-24014](https://cve.now/CVE-2023-24014.md): Delta Electronics CNCSoft-B DOPSoft Heap-based buffer overflow (CVSS 7.8)
- [CVE-2023-0432](https://cve.now/CVE-2023-0432.md): CVE-2023-0432 (CVSS 9.0)
- [CVE-2023-1135](https://cve.now/CVE-2023-1135.md): In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could set incorrect directory pe (CVSS 7.8)
- [CVE-2023-1145](https://cve.now/CVE-2023-1145.md): Delta Electronics InfraSuite Device Master versions prior to 1.0.5 are affected by a deserialization vulnerability targeting the Devi (CVSS 7.8)
- [CVE-2023-1140](https://cve.now/CVE-2023-1140.md): CVE-2023-1140 (CVSS 9.8)
- [CVE-2023-1141](https://cve.now/CVE-2023-1141.md): CVE-2023-1141 (CVSS 8.8)
- [CVE-2023-1136](https://cve.now/CVE-2023-1136.md): CVE-2023-1136 (CVSS 9.8)
- [CVE-2023-1142](https://cve.now/CVE-2023-1142.md): CVE-2023-1142 (CVSS 7.5)
- [CVE-2023-1134](https://cve.now/CVE-2023-1134.md): CVE-2023-1134 (CVSS 7.1)
- [CVE-2023-1143](https://cve.now/CVE-2023-1143.md): CVE-2023-1143 (CVSS 8.8)
- [CVE-2023-1137](https://cve.now/CVE-2023-1137.md): CVE-2023-1137 (CVSS 6.5)
- [CVE-2023-1144](https://cve.now/CVE-2023-1144.md): CVE-2023-1144 (CVSS 8.8)
- [CVE-2023-1138](https://cve.now/CVE-2023-1138.md): CVE-2023-1138 (CVSS 7.5)
- [CVE-2023-1139](https://cve.now/CVE-2023-1139.md): CVE-2023-1139 (CVSS 8.8)
- [CVE-2023-1133](https://cve.now/CVE-2023-1133.md): CVE-2023-1133 (CVSS 9.8)
- [CVE-2023-0822](https://cve.now/CVE-2023-0822.md): Improper Authorization (CVSS 8.8)
- [CVE-2023-0251](https://cve.now/CVE-2023-0251.md): CVE-2023-0251 (CVSS 7.8)
- [CVE-2023-0250](https://cve.now/CVE-2023-0250.md): CVE-2023-0250 (CVSS 7.8)
- [CVE-2023-0249](https://cve.now/CVE-2023-0249.md): CVE-2023-0249 (CVSS 7.8)
- [CVE-2022-41778](https://cve.now/CVE-2022-41778.md): Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-DataColl (CVSS 9.8)
- [CVE-2022-2966](https://cve.now/CVE-2022-2966.md): Delta Electronics DOPSoft Out-of-bounds Read (CVSS 3.3)
- [CVE-2022-2660](https://cve.now/CVE-2022-2660.md): Delta Industrial Automation DIALink versions 1.4.0.0 and prior are vulnerable to the use of a hard-coded cryptographic key which could allow (CVSS 9.8)
- [CVE-2022-43506](https://cve.now/CVE-2022-43506.md): Delta Electronics DIAEnergie SQL Injection (CVSS 8.8)
- [CVE-2022-41775](https://cve.now/CVE-2022-41775.md): Delta Electronics DIAEnergie SQL Injection (CVSS 8.8)
- [CVE-2022-43452](https://cve.now/CVE-2022-43452.md): Delta Electronics DIAEnergie SQL Injection (CVSS 8.8)
- [CVE-2022-43457](https://cve.now/CVE-2022-43457.md): Delta Electronics DIAEnergie SQL Injection (CVSS 8.8)
- [CVE-2022-43447](https://cve.now/CVE-2022-43447.md): Delta Electronics DIAEnergie SQL Injection (CVSS 8.8)
- [CVE-2022-41629](https://cve.now/CVE-2022-41629.md): Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to access the aprunning endpoint, which (CVSS 7.5)
- [CVE-2022-41776](https://cve.now/CVE-2022-41776.md): Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to trigger the WriteConfiguration metho (CVSS 7.5)
- [CVE-2022-41644](https://cve.now/CVE-2022-41644.md): Delta Electronics InfraSuite Device Master versions 00.00.01a and prior lacks authentication for a function that changes group privileges (CVSS 8.8)
- [CVE-2022-41688](https://cve.now/CVE-2022-41688.md): Delta Electronics InfraSuite Device Master versions 00.00.01a and prior lack proper authentication for functions that create and modify use (CVSS 9.8)
- [CVE-2022-40202](https://cve.now/CVE-2022-40202.md): The database backup function in Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior lacks proper authentication. (CVSS 9.8)
- [CVE-2022-41772](https://cve.now/CVE-2022-41772.md): Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior mishandle .ZIP archives containing characters used in path traversa (CVSS 9.8)
- [CVE-2022-41657](https://cve.now/CVE-2022-41657.md): Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior allow attacker provided data already serialized into memory to be u (CVSS 9.8)
- [CVE-2022-41779](https://cve.now/CVE-2022-41779.md): Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize network packets without proper verification. (CVSS 8.8)
- [CVE-2022-38142](https://cve.now/CVE-2022-38142.md): Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-Gateway (CVSS 9.8)
- [CVE-2022-41702](https://cve.now/CVE-2022-41702.md): Delta Electronics DIAEnergie (CVSS 8.7)
- [CVE-2022-41651](https://cve.now/CVE-2022-41651.md): Delta Electronics DIAEnergie (CVSS 8.7)
- [CVE-2022-41133](https://cve.now/CVE-2022-41133.md): Delta Electronics DIAEnergie (CVSS 8.8)
- [CVE-2022-41773](https://cve.now/CVE-2022-41773.md): Delta Electronics DIAEnergie (CVSS 8.8)
- [CVE-2022-41701](https://cve.now/CVE-2022-41701.md): Delta Electronics DIAEnergie (CVSS 8.7)
- [CVE-2022-40967](https://cve.now/CVE-2022-40967.md): Delta Electronics DIAEnergie (CVSS 8.8)
- [CVE-2022-41555](https://cve.now/CVE-2022-41555.md): Delta Electronics DIAEnergie (CVSS 8.7)
- [CVE-2022-40965](https://cve.now/CVE-2022-40965.md): Delta Electronics DIAEnergie (CVSS 8.7)
- [CVE-2022-3214](https://cve.now/CVE-2022-3214.md): Delta Electronics DIAEnergy Use of Hard-coded Credentials (CVSS 9.8)
- [CVE-2022-2759](https://cve.now/CVE-2022-2759.md): Delta Electronics Delta Robot Automation Studio (DRAS) versions prior to 1.13.20 are affected by improper restrictions where the software pr (CVSS 5.5)
- [CVE-2022-1405](https://cve.now/CVE-2022-1405.md): Delta Electronics CNCSoft Stack-based Buffer Overflow (CVSS 7.8)
- [CVE-2022-1404](https://cve.now/CVE-2022-1404.md): Delta Electronics CNCSoft Out-of-bounds Read (CVSS 3.3)
- [CVE-2021-32969](https://cve.now/CVE-2021-32969.md): Delta Electronics DIAScreen - Type Confusion, Out-of-bounds Write (CVSS 7.8)
- [CVE-2021-32965](https://cve.now/CVE-2021-32965.md): Delta Electronics DIAScreen - Type Confusion, Out-of-bounds Write (CVSS 7.8)
- [CVE-2022-1331](https://cve.now/CVE-2022-1331.md): Delta Electronics DMARS Improper Restriction of XML External Entity Reference (CVSS 5.5)
- [CVE-2022-1378](https://cve.now/CVE-2022-1378.md): Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE\_pgHandler.ashx. (CVSS 9.8)
- [CVE-2022-1377](https://cve.now/CVE-2022-1377.md): Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE\_rltHandler.ashx. (CVSS 9.8)
- [CVE-2022-1376](https://cve.now/CVE-2022-1376.md): Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE\_privgrpHandler.ashx. (CVSS 9.8)
- [CVE-2022-1375](https://cve.now/CVE-2022-1375.md): Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE\_slogHandler.ashx. (CVSS 9.8)
- [CVE-2022-1374](https://cve.now/CVE-2022-1374.md): Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE\_unHandler.ashx. (CVSS 9.8)
- [CVE-2022-1372](https://cve.now/CVE-2022-1372.md): Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in dlSlog.aspx. (CVSS 9.8)
- [CVE-2022-1371](https://cve.now/CVE-2022-1371.md): Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadRegf. (CVSS 9.8)
- [CVE-2022-1370](https://cve.now/CVE-2022-1370.md): Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadREGbyID. (CVSS 9.8)
- [CVE-2022-1369](https://cve.now/CVE-2022-1369.md): Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadRegIND. (CVSS 9.8)
- [CVE-2022-1367](https://cve.now/CVE-2022-1367.md): Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in Handler\_TCV.ashx. (CVSS 9.8)
- [CVE-2022-1366](https://cve.now/CVE-2022-1366.md): Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerChart.ashx. (CVSS 9.8)
- [CVE-2022-1403](https://cve.now/CVE-2022-1403.md): Delta Electronics ASDA-Soft Out-of-bounds Write (CVSS 7.8)
- [CVE-2022-1402](https://cve.now/CVE-2022-1402.md): Delta Electronics ASDA-Soft Out-of-bounds Read (CVSS 7.8)
- [CVE-2022-27175](https://cve.now/CVE-2022-27175.md): Delta Electronics DIAEnergie SQL Injection in GetCalcTagList (CVSS 9.8)
- [CVE-2022-26839](https://cve.now/CVE-2022-26839.md): Delta Electronics DIAEnergie Incorrect Default Permissions (CVSS 7.8)
- [CVE-2022-26667](https://cve.now/CVE-2022-26667.md): Delta Electronics DIAEnergie SQL Injection in GetDemandAnalysisData (CVSS 9.8)
- [CVE-2022-26338](https://cve.now/CVE-2022-26338.md): Delta Electronics DIAEnergie SQL Injection in DIAE\_hierarchyHandler.ashx (CVSS 9.8)
- [CVE-2022-26514](https://cve.now/CVE-2022-26514.md): Delta Electronics DIAEnergie SQL Injection in DIAE\_tagHandler.ashx (CVSS 9.8)
- [CVE-2022-26666](https://cve.now/CVE-2022-26666.md): Delta Electronics DIAEnergie SQL Injection in HandlerDialogECC.ashx (CVSS 9.8)
- [CVE-2022-26887](https://cve.now/CVE-2022-26887.md): Delta Electronics DIAEnergie SQL Injection in DIAE\_HandlerTag\_KID.ashx (CVSS 9.8)
- [CVE-2022-26836](https://cve.now/CVE-2022-26836.md): Delta Electronics DIAEnergie SQL Injection in HandlerExport.ashx/Calendar.ashx (CVSS 9.8)
- [CVE-2022-26349](https://cve.now/CVE-2022-26349.md): Delta Electronics DIAEnergie SQL Injection in DIAE\_eccoefficientHandler.ashx (CVSS 9.8)
- [CVE-2022-26065](https://cve.now/CVE-2022-26065.md): Delta Electronics DIAEnergie SQL Injection in GetLatestDemandNode and GetDemandAnalysisData (CVSS 9.8)
- [CVE-2022-26013](https://cve.now/CVE-2022-26013.md): Delta Electronics DIAEnergie SQL Injection in DIAE\_dmdsetHandler.ashx (CVSS 9.8)
- [CVE-2022-25880](https://cve.now/CVE-2022-25880.md): Delta Electronics DIAEnergie SQL Injection in DIAE\_hierarchyHandler.ashx (CVSS 9.8)
- [CVE-2022-0923](https://cve.now/CVE-2022-0923.md): Delta Electronics DIAEnergie SQL Injection in HandlerDialog\_KID.ashx (CVSS 9.8)
- [CVE-2022-26069](https://cve.now/CVE-2022-26069.md): Delta Electronics DIAEnergie SQL Injection in HandlerPage\_KID.ashx (CVSS 9.8)
- [CVE-2022-25347](https://cve.now/CVE-2022-25347.md): Delta Electronics DIAEnergie Path Traversal (CVSS 9.8)
- [CVE-2022-25980](https://cve.now/CVE-2022-25980.md): Delta Electronics DIAEnergie SQL Injection in HandlerCommon.ashx (CVSS 9.8)
- [CVE-2022-26059](https://cve.now/CVE-2022-26059.md): Delta Electronics DIAEnergie SQL Injection in GetQueryData (CVSS 9.8)
- [CVE-2021-44768](https://cve.now/CVE-2021-44768.md): Delta Electronics CNCSoft Out-of-bounds Read (CVSS 6.1)
- [CVE-2022-0988](https://cve.now/CVE-2022-0988.md): Delta Electronics DIAEnergie CLEARTEXT Transmission of Sensitive Information (CVSS 7.1)
- [CVE-2021-23228](https://cve.now/CVE-2021-23228.md): Delta Electronics DIAEnergie (Update A) (CVSS 7.5)
- [CVE-2021-31558](https://cve.now/CVE-2021-31558.md): Delta Electronics DIAEnergie (Update A) (CVSS 6.5)
- [CVE-2021-44544](https://cve.now/CVE-2021-44544.md): Delta Electronics DIAEnergie (Update A) (CVSS 7.5)
- [CVE-2021-44471](https://cve.now/CVE-2021-44471.md): Delta Electronics DIAEnergie (Update A) (CVSS 7.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/delta-electronics
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.