Vulnerability Description
Delta Electronics DIALink versions 1.2.4.0 and prior insecurely loads libraries, which may allow an attacker to use DLL hijacking and takeover the system where the software is installed.
CVSS Score
7.8
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Deltaww | Dialink | <= 1.2.4.0 |
Related Weaknesses (CWE)
References
- https://us-cert.cisa.gov/ics/advisories/icsa-21-294-02Third Party AdvisoryUS Government Resource
- https://us-cert.cisa.gov/ics/advisories/icsa-21-294-02Third Party AdvisoryUS Government Resource
FAQ
What is CVE-2021-38416?
CVE-2021-38416 is a vulnerability with a CVSS score of 7.8 (HIGH). Delta Electronics DIALink versions 1.2.4.0 and prior insecurely loads libraries, which may allow an attacker to use DLL hijacking and takeover the system where the software is installed.
How severe is CVE-2021-38416?
CVE-2021-38416 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-38416?
Check the references section above for vendor advisories and patch information. Affected products include: Deltaww Dialink.