Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2022-41133

Delta Electronics DIAEnergie

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in GetDIAE_line_message_settingsListParameters. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Delta Electronics DIAEnergie

  • All to < v1.9.01.002affected

References