| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| HTTP basic auth enforces no retry limit or backoff. Combined with the default service password, the keyspace is exhaustible. |
| The shipped WebUI template database retains the factory default passwords for all five account types in cleartext. Defaults are identical across devices and were unchanged on the tested unit. |
| Delta UFC500 charging stations derive the default credentials of the Service account from character positions of the device serial number. An unauthenticated attacker with adjacent network access can reconstruct the resulting password, or exhaust the keyspace, and log in to read and change sensitive settings such as the OCPP backend. |
| The web server does not check authentication on POST or PUT. An unauthenticated attacker can reboot the charger; by brute-forcing the configid, they can also set the service password and then change any setting. |
| Delta Electronics DIAView has multiple vulnerabilities. |
| Delta Electronics DIAView has multiple vulnerabilities. |
| This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| ASDA-Soft Stack-based Buffer Overflow Vulnerability |
| Delta Electronics DIAView has Command Injection vulnerability. |
| Delta Electronics DIAView has an authentication bypass vulnerability. |
| DIAView (v4.2.0 and prior) - Directory Traversal Information Disclosure Vulnerability |
| Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process. |
| Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process. |
| DVP-12SE - Modbus/TCP Cleartext Transmission of Sensitive Information |
| DVP-12SE11T - Password Protection Bypass |
| DVP-12SE11T - Authentication Bypass via Partial Password Disclosure |
| DVP-12SE11T - Denial of Service Vulnerability |
| DVP-12SE11T - Out-of-bound memory write Vulnerability |
| ASDA-Soft Stack-based Buffer Overflow Vulnerability |
| ASDA-Soft Stack-based Buffer Overflow Vulnerability |
