CVE-2021-38422 HIGH

CVE-2021-38422: Delta Electronics DIALink

Vendor Delta Electronics
Product DIALink
Weakness CWE-312 · Cleartext storage
Published November 3, 2021
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

7.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Delta Electronics DIALink versions 1.2.4.0 and prior stores sensitive information in cleartext, which may allow an attacker to have extensive access to the application directory and escalate privileges.

Key dates

02Disclosure timeline

November 3, 2021 CVE published
September 16, 2024 Record updated