CVE-2022-29733: Deltacontrols Entelitouch Firmware

Medium severity, CVSS 5.9. EPSS: 0.7% chance of exploitation in the next 30 days.

Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to transmit and store sensitive information in cleartext. This vulnerability allows attackers to intercept HTTP Cookie authentication credentials via a man-in-the-middle attack.

Affected products

• Deltacontrols Entelitouch Firmware: version 3.33.4005 only; version 3.40.3706 only; version 3.40.3935 only

Published 2022-06-02. Last modified 2026-06-17.