CVE-2021-38424
Summary
| CVE | CVE-2021-38424 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-11-03 20:15:00 UTC |
| Updated | 2021-11-05 16:21:00 UTC |
| Description | The tag interface of Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to an attacker injecting formulas into the tag data. Those formulas may then be executed when it is opened with a spreadsheet application. |
Risk And Classification
Problem Types: CWE-1236
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Delta Electronics DIALink | CISA | MISC | us-cert.cisa.gov | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
LEGACY: Michael Heinzl reported these vulnerabilities to CISA.
Legacy QID Mappings
- 591006 Delta Electronics DIALink Multiple Vulnerabilities (ICSA-21-294-02)