Vulnerabilities

TI-2022-12129 CVE-2022-29735 · GHSA-f82p-mhgm-gg2r

Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 allows attackers to…

MEDIUM 40

Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 allows attackers to execute arbitrary commands via a crafted HTTP request.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01008 Published 2022-05-27 No fix listed CWE-352

TI-2022-12127 CVE-2022-29733 · GHSA-8cmw-hww2-95qp

Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to transmit…

LOW 28

Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to transmit and store sensitive information in cleartext.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.0071 Published 2022-05-27 No fix listed CWE-319

TI-2022-12126 CVE-2022-29732 · GHSA-r2ff-pjr6-xw66

Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to contain…

LOW 29

Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to contain a cross-site scripting (XSS) vulnerability via the Username parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00775 Published 2022-05-27 No fix listed CWE-79

Vulnerabilities

Filters

Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 allows attackers to…

Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to transmit…

Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to contain…