Detections
Analytics

CVE-2021-38424

high

Description

The tag interface of Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to an attacker injecting formulas into the tag data. Those formulas may then be executed when it is opened with a spreadsheet application.

References

https://us-cert.cisa.gov/ics/advisories/icsa-21-294-02

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-24876

Details

Source: Mitre, NVD

Published: 2021-11-03

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 7.8

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.0051