Skip to content
OpenAdvisories
Critical ICSA-24-277-03 2 CVEs

Delta Electronics DIAEnergie

Published Oct 3, 2024 · Updated Oct 3, 2024

Vendor: Delta Electronics Product: DIAEnergie

Summary

Successful exploitation of these vulnerabilities could allow an attacker to retrieve records or cause a denial of service.

Vulnerabilities 2

  • Critical 9.8
    CVE-2024-43699

    Delta Electronics DIAEnergie SQL Injection

    Delta Electronics DIAEnergie is vulnerable to an SQL injection in the script AM_RegReport.aspx. An unauthenticated attacker may be able to exploit this issue to obtain records contained in the targeted product.

    Delta Electronics DIAEnergie ICS / OT
  • High 8.8
    CVE-2024-42417

    Delta Electronics DIAEnergie SQL Injection

    Delta Electronics DIAEnergie is vulnerable to an SQL injection in the script Handler_CFG.ashx. An authenticated attacker may be able to exploit this issue to cause delay in the targeted product.

    Delta Electronics DIAEnergie ICS / OT

Revision history

  1. #1

    Initial Publication

References