VULNERABILITY INTELLIGENCE

CVE-2021-38422

CVSS score7.8 HIGH

EPSS probability0.18%

CISA KEVNot currently listed

Published2021-11-03

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Delta Electronics DIALink versions 1.2.4.0 and prior stores sensitive information in cleartext, which may allow an attacker to have extensive access to the application directory and escalate privileges.

Weakness classification

CWE-312: Cleartext Storage of Sensitive Information

Primary references

ics-cert@hq.dhs.gov — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource