What is the vulnerability ID of this issue?

The vulnerability ID of this issue is CVE-2021-38416.

What is the severity of CVE-2021-38416?

CVE-2021-38416 has a severity value of 7.8, which is considered high.

How does CVE-2021-38416 affect the Delta Electronics DIALink software?

CVE-2021-38416 affects Delta Electronics DIALink versions 1.2.4.0 and prior by insecurely loading libraries, which can be exploited by an attacker for DLL hijacking and system takeover.

What is the affected version of Delta Electronics DIALink?

Delta Electronics DIALink versions 1.2.4.0 and prior are affected by CVE-2021-38416.

Is there a fix available for CVE-2021-38416?

There is currently no information available about a fix for CVE-2021-38416. It is recommended to follow the guidance provided by the software vendor or a trusted security source.

Vulnerability/
CVE-2021-38416

high

7.8

CWE

427

3/11/2021

16/9/2024

CVE-2021-38416: Delta Electronics DIALink

First published: Wed Nov 03 2021(Updated: )

Delta Electronics DIALink versions 1.2.4.0 and prior insecurely loads libraries, which may allow an attacker to use DLL hijacking and takeover the system where the software is installed.

Credit: ics-cert@hq.dhs.gov

Affected Software	Affected Version	How to fix
Deltaww Dialink	<=1.2.4.0
Delta Electronics DIALink	<=1.2.4.0

Never miss a vulnerability like this again

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

ICSA-21-294-02

Frequently Asked Questions

What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2021-38416.
What is the severity of CVE-2021-38416?
CVE-2021-38416 has a severity value of 7.8, which is considered high.
How does CVE-2021-38416 affect the Delta Electronics DIALink software?
CVE-2021-38416 affects Delta Electronics DIALink versions 1.2.4.0 and prior by insecurely loading libraries, which can be exploited by an attacker for DLL hijacking and system takeover.
What is the affected version of Delta Electronics DIALink?
Delta Electronics DIALink versions 1.2.4.0 and prior are affected by CVE-2021-38416.
Is there a fix available for CVE-2021-38416?
There is currently no information available about a fix for CVE-2021-38416. It is recommended to follow the guidance provided by the software vendor or a trusted security source.

collector/nvd-index
agent/type
agent/weakness
agent/references
agent/author
agent/description
collector/ics-cert-advisory
source/ICS
agent/software-canonical-lookup
agent/software-canonical-lookup-request
agent/softwarecombine
agent/severity
agent/title
agent/tags
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/first-publish-date
agent/event
agent/trending
vendor/deltaww
canonical/deltaww dialink
version/deltaww dialink/1.2.4.0
vendor/delta electronics
canonical/delta electronics dialink
version/delta electronics dialink/1.2.4.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.