← Back

Deltacontrols

deltacontrols

4 CVEs • 4 products

Products (4)

Click to collapse
Toggle

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Deltacontrols
1Entelitouch Firmware
Nov 21, 2024
Jun 2, 2022
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 allows attackers to execute arbitrary commands via a crafted HTTP request.
1Deltacontrols
1Entelitouch Firmware
Nov 21, 2024
Jun 2, 2022
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to transmit and store sensitive information in cleartext. This vulnerability allows attackers to intercept HTTP Cookie authentication credenti...Show more
Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to transmit and store sensitive information in cleartext. This vulnerability allows attackers to intercept HTTP Cookie authentication credentials via a man-in-the-middle attack.Show less
1Deltacontrols
1Entelitouch Firmware
Nov 21, 2024
Jun 2, 2022
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to contain a cross-site scripting (XSS) vulnerability via the Username parameter. This vulnerability allows attackers to execute arbitrary web...Show more
Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to contain a cross-site scripting (XSS) vulnerability via the Username parameter. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload.Show less
1Deltacontrols
1Entelibus Firmware
Nov 21, 2024
Aug 26, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Buffer Overflow in dactetra in Delta Controls enteliBUS Manager V3.40_B-571848 allows remote unauthenticated users to execute arbitrary code and possibly cause a denial of service via unspecified vectors.