Read the docs

deltaww

Records313All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical90CVSS 9.0–10.0
CVSS high192CVSS 7.0–8.9

Exploited now

deltaww records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

14 records in Diascreen · all components

Priority MEDIUM 44

If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetParameter can be exploited, allowing the attacker to remotely exec…

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.02906 Published 2024-11-11 Fixed in v1.5.0 CWE-121
Priority MEDIUM 40

Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to a stack-based buffer overflow, which could allow an attacker to remotely execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01999 Published 2023-02-08 No fix listed CWE-121
Priority LOW 39

A crafted DPA file could force Delta Electronics DIAScreen to overflow a stack-based buffer, which could allow an attacker to execute arbitrary code.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00424 Published 2024-08-06 Fixed in 1.4.2 CWE-121
Priority LOW 39

Delta Electronics DIAScreen versions prior to 1.1.0 are vulnerable to an out-of-bounds write condition, which may result in a system crash or allow an attacker to remotely execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01224 Published 2022-05-24 Fixed in v1.1.0 CWE-787
Priority LOW 39

Delta Electronics DIAScreen versions prior to 1.1.0 are vulnerable to type confusion, which may allow an attacker to remotely execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01224 Published 2022-05-24 Fixed in v1.1.0 CWE-843
Priority LOW 38

If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetObjectInfo can be exploited, allowing the attacker to remotely exe…

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00301 Published 2024-11-11 Fixed in v1.5.0 CWE-121
Priority LOW 38

If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in CEtherIPTagItem can be exploited, allowing the attacker to remotely exec…

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00301 Published 2024-11-11 Fixed in v1.5.0 CWE-121
Priority LOW 36

Delta Electronics DIAScreen may write past the end of an allocated buffer while parsing a specially crafted input file.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00232 Published 2023-09-21 Fixed in v1.3.2 CWE-787
Priority LOW 36

Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to a buffer overflow through improper restrictions of operations within memory, which could allow an attacker to remotely execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00296 Published 2023-02-08 No fix listed CWE-119
Priority LOW 36

Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to out-of-bounds write, which may allow an attacker to remotely execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00253 Published 2023-02-08 No fix listed CWE-787
Open these records in search →