Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2024-34032

SQL Injection in Delta Electronics DIAEnergie

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Delta Electronics DIAEnergie is vulnerable to an SQL injection vulnerability that exists in the GetDIACloudList endpoint. An authenticated attacker can exploit this issue to potentially compromise the system on which DIAEnergie is deployed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Delta Electronics DIAEnergie

Default version status: unaffected

  • 1.10.00.005affected

References