CVE-2021-38424
Delta Electronics DIALink
- State
- Published
- Severity
- 5.9 Medium
- Published
- Nov 3, 2021
- Updated
- Sep 16, 2024
- Reserved
- Aug 10, 2021
Description
The tag interface of Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to an attacker injecting formulas into the tag data. Those formulas may then be executed when it is opened with a spreadsheet application.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.9 Medium | CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L | icscert |
Weaknesses
- CWE-1236 Improper Neutralization of Formula Elements in a CSV File
Affected Products
| Product | Versions |
|---|---|
DIALinkDelta Electronics |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.