Delta Electronics
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| DOPSoft 2 | 3 | 1 | Sep 17, 2021 |
| DIAEnergie | 69 | – | Aug 18, 2025 |
| InfraSuite Device Master | 31 | – | Oct 30, 2024 |
| CNCSoft-G2 | 14 | – | Sep 24, 2025 |
| DIAScreen | 14 | – | Oct 3, 2025 |
| DIALink | 12 | – | Sep 11, 2025 |
| DOPSoft | 12 | – | Jan 18, 2024 |
| CNCSoft | 8 | – | Jun 4, 2025 |
| ISPSoft | 6 | – | Apr 30, 2025 |
| ASDA-Soft | 5 | – | Jan 27, 2026 |
| DIAView | 5 | – | Jan 16, 2026 |
| Delta UFC500 | 4 | – | Oct 30, 2026 |
| DVP-12SE11T | 4 | – | Dec 30, 2025 |
| WPLSoft | 3 | – | Jan 18, 2024 |
| COMMGR | 3 | – | Aug 26, 2025 |
| DRASimuCAD | 3 | – | Dec 30, 2024 |
| DTN Soft | 2 | – | Jun 30, 2025 |
| CNCSoft-B DOPSoft | 2 | – | Jun 7, 2023 |
| DTM Soft | 2 | – | Jun 30, 2025 |
| DVP-12SE | 1 | – | Dec 26, 2025 |
| CNCSoft-G2 DOPSoft | 1 | – | Apr 30, 2024 |
| DVP15MC11T | 1 | – | Dec 22, 2025 |
| DVP32ES2 PLC | 1 | – | Oct 9, 2023 |
| DX-2100-L1-CN | 1 | – | Mar 31, 2023 |
| EIP Builder | 1 | – | Aug 26, 2025 |
| Industrial Automation DIALink | 1 | – | Dec 13, 2022 |
| CNCSoft-B v1.0.0.4 DOPSoft | 1 | – | Feb 29, 2024 |
| DIAEnergy | 1 | – | Sep 16, 2022 |
| DMARS | 1 | – | May 3, 2022 |
| Delta Robot Automation Studio (DRAS) | 1 | – | Aug 31, 2022 |
| CNCSoft-B | 1 | – | Mar 1, 2024 |
Exploited and recent CVEs
- CVE-2021-38406 Delta Electronics DOPSoft 2 Out-of-Bounds Write 76.4%
- CVE-2026-22110 Missing authentication check on POST/PUT requests 0.2%
- CVE-2026-22105 Use of default password based on serial number 0.2%
- CVE-2026-22109 Default WebUI passwords stored in plaintext 0.2%
- CVE-2026-22114 Missing brute-force protection for web interface 0.2%
- CVE-2026-1361 ASDA-Soft Stack-based Buffer Overflow Vulnerability 0.6%
- CVE-2026-0975 DIAView - Command Injection Vulnerability 1.5%
- CVE-2025-62581 DIAView - Authentication Bypass Vulnerability 0.6%
- CVE-2025-62582 DIAView - Authentication Bypass Vulnerability 0.5%
- CVE-2025-15359 DVP-12SE11T - Out-of-bound memory write Vulnerability 0.3%
- CVE-2025-15358 DVP-12SE11T - Denial of Service Vulnerability 0.3%
- CVE-2025-15103 DVP-12SE11T - Authentication Bypass via Partial Password Disclosure 0.3%
- CVE-2025-15102 DVP-12SE11T - Password Protection Bypass 0.3%
- CVE-2025-62578 DVP-12SE - Modbus/TCP Cleartext Transmission of Sensitive Information 0.3%
- CVE-2025-59301 Modbus/TCP Dos Vulnerability in DVP15MC11T 0.2%
- CVE-2025-62580 ASDA-Soft Stack-based Buffer Overflow Vulnerability 0.2%
- CVE-2025-62579 ASDA-Soft Stack-based Buffer Overflow Vulnerability 0.2%
- CVE-2025-59300 File Parsing Out-Of-Bounds Write Vulnerability in DIAScreen 0.2%
- CVE-2025-59299 File Parsing Out-Of-Bounds Write Vulnerability in DIAScreen 0.2%
- CVE-2025-59298 File Parsing Out-Of-Bounds Write Vulnerability in DIAScreen 0.2%
- CVE-2025-59297 File Parsing Out-Of-Bounds Write Vulnerability in DIAScreen 0.2%
- CVE-2025-58319 File Parsing Memory Corruption in CNCSoft-G2 0.2%
- CVE-2025-58317 File Parsing Memory Corruption in CNCSoft-G2 0.3%
- CVE-2025-58320 DIALink - Directory Traversal Authentication Bypass Vulnerability 17.3%
- CVE-2025-58321 DIALink - Directory Traversal Authentication Bypass Vulnerability 1.3%
- CVE-2025-58318 DIAView - Authentication Bypass Vulnerability 0.2%
- CVE-2025-53419 COMMGR Code Injection Vulnerability 0.2%
- CVE-2025-53418 COMMGR Stack-based Buffer Overflow Vulnerability 0.4%
- CVE-2025-57704 EIP Builder XML External Entity Processing Information Disclosure Vulnerability 0.2%
- CVE-2025-57703 Reflected Cross-site Scripting in DIAEnergie 0.2%