CVE-2021-38418: Deltaww Dialink

Medium severity, CVSS 5.9. EPSS: 0.6% chance of exploitation in the next 30 days.

Delta Electronics DIALink versions 1.2.4.0 and prior runs by default on HTTP, which may allow an attacker to be positioned between the traffic and perform a machine-in-the-middle attack to access information without authorization.

Affected products

• Deltaww Dialink: up to and including 1.2.4.0

Published 2021-11-03. Last modified 2026-06-17.