CVE-2022-29732
02.06.2022, 14:15
Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to contain a cross-site scripting (XSS) vulnerability via the Username parameter. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
| Vendor | Product | Version |
|---|---|---|
| deltacontrols | entelitouch_firmware | 3.33.4005 |
| deltacontrols | entelitouch_firmware | 3.40.3706 |
| deltacontrols | entelitouch_firmware | 3.40.3935 |
𝑥
= Vulnerable software versions