CVE-2022-29733

5.9 mediumEPSS 0.7%

Medium (5.9) in deltacontrols entelitouch firmware. EPSS 0.7% chance of exploitation in the next 30 days.

Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to transmit and store sensitive information in cleartext. This vulnerability allows attackers to intercept HTTP Cookie authentication credentials via a man-in-the-middle attack.

Severity

CVSS 3.1

5.9 medium

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
CWE: CWE-319
Published: 2022-06-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

deltacontrols:entelitouch_firmware

References

https://www.deltacontrols.com/
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5704.php
https://www.deltacontrols.com/
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5704.php

Check your stack JSON