CVE-2022-43457

HIGH 8.8

Delta Electronics DIAEnergie SQL Injection

CVSS Score

8.8

EPSS Score

0.0%

EPSS Percentile

0th

SQL Injection in HandlerPage_KID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

CWE	CWE-89
Vendor	delta electronics
Product	diaenergie
Published	Nov 17, 2022
Last Updated	Oct 15, 2024

Stay Ahead of the Next One

Get instant alerts for delta electronics diaenergie

Be the first to know when new high vulnerabilities affecting delta electronics diaenergie are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

Delta Electronics / DIAEnergie

All

References

NVD ↗ CVE.org ↗ EPSS Data ↗

cisa.gov: https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06

Credits

Michael Heinzl reported these vulnerabilities to CISA.