CVE-2022-2660

Delta Industrial Automation DIALink versions 1.4.0.0 and prior are vulnerable to the use of a hard-coded cryptographic key which could allow an attacker to decrypt sensitive data and compromise the machine.

Score

CVSS 3.1 9.8 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2022-12-13

Last modified

2025-04-16

Weaknesses

CWE-321, CWE-798

Affected products

• Industrial Automation Dialink (Delta Electronics)
• Dialink (Deltaww)

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-235-02