CVE-2021-38418: Delta Electronics DIALink
Published Nov 3, 2021
·Updated
Delta Electronics DIALink versions 1.2.4.0 and prior runs by default on HTTP, which may allow an attacker to be positioned between the traffic and perform a machine-in-the-middle attack to access information without authorization.
Affected Software
2 affected components
Delta Electronics DIALink<=1.2.4.0
Deltaww Dialink<=1.2.4.0
Event History
Nov 3, 2021
CVE Published
via MITRE·07:05 PM
Data Sourced
via MITRE·07:05 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID of the Delta Electronics DIALink vulnerability?
The vulnerability ID of the Delta Electronics DIALink vulnerability is CVE-2021-38418.
2
What is the severity of CVE-2021-38418?
The severity of CVE-2021-38418 is high, with a severity value of 5.9.
3
What is the affected software for CVE-2021-38418?
The affected software for CVE-2021-38418 is Delta Electronics DIALink versions 1.2.4.0 and prior.
4
What is the default protocol used by Delta Electronics DIALink?
The default protocol used by Delta Electronics DIALink is HTTP.
5
What can an attacker do with CVE-2021-38418?
An attacker with CVE-2021-38418 can position themselves between the traffic and perform a man-in-the-middle attack to access unauthorized information.