PT-2021-22121
CVE-2021-38424
·
تاريخ النشر
2021-11-03
·
تاريخ التحديث
2021-11-05
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Delta Electronics DIALink versions 1.2.4.0 and prior
Description
The issue allows an attacker to inject formulas into the tag data through the tag interface. These formulas can then be executed when the data is opened with a spreadsheet application.
Recommendations
For Delta Electronics DIALink versions 1.2.4.0 and prior, consider disabling the tag interface functionality until a patch is available to prevent the injection and execution of malicious formulas.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾