Vulnerabilidades de Delta Electronics (CVE)

Registros CVE publicados para Delta Electronics, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

49 resultados
8.7Alta
CVE-2026-22110

Missing authentication check on POST/PUT requests

Delta Electronics Delta UFC500

The web server does not check authentication on POST or PUT. An unauthenticated attacker can reboot the charger; by brute-forcing the configid, they can also set the service password and then change any setting.

8.7Alta
CVE-2026-22105

Use of default password based on serial number

Delta Electronics Delta UFC500

Delta UFC500 charging stations derive the default credentials of the Service account from character positions of the device serial number. An unauthenticated attacker with adjacent network access can reconstruct the resulting password, or exhaust the keyspace…

8.4Alta
CVE-2026-22109

Default WebUI passwords stored in plaintext

Delta Electronics Delta UFC500

The shipped WebUI template database retains the factory default passwords for all five account types in cleartext. Defaults are identical across devices and were unchanged on the tested unit.

7.8Alta
CVE-2025-58319

File Parsing Memory Corruption in CNCSoft-G2

Delta Electronics CNCSoft-G2

Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.

7.8Alta
CVE-2025-58317

File Parsing Memory Corruption in CNCSoft-G2

Delta Electronics CNCSoft-G2

Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.