Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2024-28029

Client-Side Enforcement of Server-Side Security in Delta Electronics DIAEnergie

Description

Privileges are not fully verified server-side, which can be abused by a user with limited privileges to bypass authorization and access privileged functionality.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Delta Electronics DIAEnergie

Default version status: unaffected

  • 0 to < v1.10.00.005affected

References