CVE-2021-38420 HIGH

CVE-2021-38420: Delta Electronics DIALink

Vendor Delta Electronics
Product DIALink
Weakness CWE-427
Published November 3, 2021
Last update September 16, 2024

CVSS base score

7.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Delta Electronics DIALink versions 1.2.4.0 and prior default permissions give extensive permissions to low-privileged user accounts, which may allow an attacker to modify the installation directory and upload malicious files.

Key dates

02Disclosure timeline

November 3, 2021 CVE published
September 16, 2024 Record updated