CVE-2021-38424

Name of the Vulnerable Software and Affected Versions Delta Electronics DIALink versions 1.2.4.0 and prior

Description The issue allows an attacker to inject formulas into the tag data through the tag interface. These formulas can then be executed when the data is opened with a spreadsheet application.

Recommendations For Delta Electronics DIALink versions 1.2.4.0 and prior, consider disabling the tag interface functionality until a patch is available to prevent the injection and execution of malicious formulas.