← Back

Entelitouch Firmware

entelitouch_firmware

Vendor: Deltacontrols • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-29735
1Deltacontrols
1Entelitouch Firmware
Nov 21, 2024
Jun 2, 2022
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 allows attackers to execute arbitrary commands via a crafted HTTP request.
CVE-2022-29733
1Deltacontrols
1Entelitouch Firmware
Nov 21, 2024
Jun 2, 2022
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to transmit and store sensitive information in cleartext. This vulnerability allows attackers to intercept HTTP Cookie authentication credenti...Show more
Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to transmit and store sensitive information in cleartext. This vulnerability allows attackers to intercept HTTP Cookie authentication credentials via a man-in-the-middle attack.Show less
CVE-2022-29732
1Deltacontrols
1Entelitouch Firmware
Nov 21, 2024
Jun 2, 2022
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to contain a cross-site scripting (XSS) vulnerability via the Username parameter. This vulnerability allows attackers to execute arbitrary web...Show more
Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to contain a cross-site scripting (XSS) vulnerability via the Username parameter. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload.Show less