Known vulnerabilities in DIALink

Vendor: Delta Electronics, Inc.
Software: DIALink
Software CPE: cpe:2.3:h:delta_electronics:dialink:*:*:*:*:*:*:*:*
Website: https://www.deltaww.com/
Total vulnerabilities: 14
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting DIALink DIALink is affected by 14 known vulnerabilities: 2 high, 3 medium, 9 low Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU115747 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-58321		 CWE-22 High
No
No
 1.8.0.0 17.09.2025 SB2025091779
#VU115746 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-58320		 CWE-22 Medium
No
No
 1.8.0.0 17.09.2025 SB2025091779
#VU68974 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-2969		 CWE-22 Medium
No
No
 1.5.0.0 Beta 4 07.11.2022 SB2022110701
#VU66737 - Use of Hard-coded Cryptographic Key
CVE-2022-2660		 CWE-321 High
No
No
 1.5.0.0 24.08.2022 SB2022082407
#VU57611 - Incorrect Default Permissions
CVE-2021-38420		 CWE-276 Low
No
No
 - 22.10.2021 SB2021102209
#VU57610 - Uncontrolled Search Path Element
CVE-2021-38416		 CWE-427 Low
No
No
 - 22.10.2021 SB2021102209
#VU57609 - Cleartext Storage of Sensitive Information
CVE-2021-38422		 CWE-312 Low
No
No
 - 22.10.2021 SB2021102209
#VU57608 - Improper Neutralization of Formula Elements in a CSV File
CVE-2021-38424		 CWE-1236 Low
No
No
 - 22.10.2021 SB2021102209
#VU57607 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-38411		 CWE-79 Low
No
No
 - 22.10.2021 SB2021102209
#VU57606 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-38403		 CWE-79 Low
No
No
 - 22.10.2021 SB2021102209
#VU57605 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-38407		 CWE-79 Low
No
No
 - 22.10.2021 SB2021102209
#VU57603 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-38488		 CWE-79 Low
No
No
 - 22.10.2021 SB2021102209
#VU57602 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-38428		 CWE-79 Low
No
No
 - 22.10.2021 SB2021102209
#VU57601 - Cleartext Transmission of Sensitive Information
CVE-2021-38418		 CWE-319 Medium
No
No
 - 22.10.2021 SB2021102209