Skip to content
OpenAdvisories

Product · Delta Electronics

DIAEnergie

69 known vulnerabilities.

DIAEnergie at a glance

Last 12 months
0
Critical · all time
30
Exploited · all time
0
Public exploit · all time
1
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202540
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Latest advisories

  • Critical max 9.8
    ICSA-24-277-03 2 CVEs

    Delta Electronics DIAEnergie

    Successful exploitation of these vulnerabilities could allow an attacker to retrieve records or cause a denial of service.

    Delta Electronics
  • High max 8.8
    ICSA-24-123-02 3 CVEs

    Delta Electronics DIAEnergie

    Successful exploitation of these vulnerabilities could allow an authenticated attacker with limited privileges to escalate privileges, retrieve confidential information, upload arbitrary files, backdoor the application, and compromise the system on which DIAE…

    Delta Electronics
  • High max 8.8
    ICSA-24-074-12 10 CVEs

    Delta Electronics DIAEnergie

    Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges, disclose sensitive information, or disrupt system availability.

    Delta Electronics
  • Critical max 9.8
    ICSA-22-256-03 1 CVE rev. 2

    Delta Electronics DIAEnergie

    This updated advisory is a follow-up to the original advisory titled �ICSA-22-256-03 Delta Industrial Automation DIAEnergie� that was published September 19, 2022, on the ICS webpage on cisa.gov/ICS.

    Delta Electronics
    first Sep 19, 2022
  • High max 8.8
    ICSA-22-298-06 14 CVEs rev. 2

    Delta Electronics DIAEnergie

    This updated advisory is a follow-up to the original advisory titled ICSA-22-298-06 Delta Electronics DIAEnergie (Update A) that was published November 10, 2022, to the ICS webpage at www.cisa.gov/uscert.

    Delta Electronics
    first Nov 10, 2022
All Critical High Medium Low Exploited only Public exploit

69 results · Feed

  • Medium 5.9
    CVE-2025-57703

    Reflected Cross-site Scripting in DIAEnergie

    DIAEnergie - Reflected Cross-site Scripting

    Delta Electronics DIAEnergie ICS / OT
  • Medium 5.9
    CVE-2025-57702

    Reflected Cross-site Scripting in DIAEnergie

    DIAEnergie - Reflected Cross-site Scripting

    Delta Electronics DIAEnergie ICS / OT
  • Medium 5.9
    CVE-2025-57701

    Reflected Cross-site Scripting in DIAEnergie

    DIAEnergie - Reflected Cross-site Scripting

    Delta Electronics DIAEnergie ICS / OT
  • High 7.0
    CVE-2025-57700

    Stored Cross-site Scripting in DIAEnergie

    DIAEnergie - Stored Cross-site Scripting

    Delta Electronics DIAEnergie ICS / OT
  • High 8.8
    CVE-2024-42417

    Delta Electronics DIAEnergie SQL Injection

    Delta Electronics DIAEnergie is vulnerable to an SQL injection in the script Handler_CFG.ashx. An authenticated attacker may be able to exploit this issue to cause delay in the targeted product.

    Delta Electronics DIAEnergie ICS / OT
  • Critical 9.8
    CVE-2024-43699

    Delta Electronics DIAEnergie SQL Injection

    Delta Electronics DIAEnergie is vulnerable to an SQL injection in the script AM_RegReport.aspx. An unauthenticated attacker may be able to exploit this issue to obtain records contained in the targeted product.

    Delta Electronics DIAEnergie ICS / OT
  • High 7.5
    CVE-2024-4549

    Delta Electronics DIAEnergie SQL Injection

    A denial of service vulnerability exists in Delta Electronics DIAEnergie v1.10.1.8610 and prior. When processing an 'ICS Restart!' message, CEBC.exe restarts the system.

    Delta Electronics DIAEnergie ICS / OT
  • Critical 9.8
    CVE-2024-4548 Public exploit EPSS 29%

    Delta Electronics DIAEnergie SQL Injection

    An SQLi vulnerability exists in Delta Electronics DIAEnergie v1.10.1.8610 and prior when CEBC.exe processes a 'RecalculateHDMWYC' message, which is split into 4 fields using the '~' character as the separator. An unauthenticated remote attacker can perform SQ…

    Delta Electronics DIAEnergie ICS / OT
  • Critical 9.8
    CVE-2024-4547

    Delta Electronics DIAEnergie Unauthenticated SQL Injection

    A SQLi vulnerability exists in Delta Electronics DIAEnergie v1.10.1.8610 and prior when CEBC.exe processes a 'RecalculateScript' message, which is splitted into 4 fields using the '~' character as the separator. An unauthenticated remote attacker can perform …

    Delta Electronics DIAEnergie ICS / OT
  • High 8.8
    CVE-2024-34033

    Path Traversal vulnerability in Delta Electronics DIAEnergie

    Delta Electronics DIAEnergie has insufficient input validation which makes it possible to perform a path traversal attack and write outside of the intended directory. If a file name is specified that already exists on the file system, then the original file w…

    Delta Electronics DIAEnergie ICS / OT
  • High 8.8
    CVE-2024-34031

    SQL Injection vulnerability in Delta Electronics DIAEnergie

    Delta Electronics DIAEnergie is vulnerable to an SQL injection vulnerability that exists in the script Handler_CFG.ashx. An authenticated attacker can exploit this issue to potentially compromise the system on which DIAEnergie is deployed.

    Delta Electronics DIAEnergie ICS / OT
  • High 8.8
    CVE-2024-34032

    SQL Injection in Delta Electronics DIAEnergie

    Delta Electronics DIAEnergie is vulnerable to an SQL injection vulnerability that exists in the GetDIACloudList endpoint. An authenticated attacker can exploit this issue to potentially compromise the system on which DIAEnergie is deployed.

    Delta Electronics DIAEnergie ICS / OT
  • High 8.8
    CVE-2024-25574

    Delta Electronics DIAEnergie SQL Injection

    SQL injection vulnerability exists in GetDIAE_usListParameters.

    Delta Electronics DIAEnergie ICS / OT
  • Medium 4.6
    CVE-2024-28045

    Delta Electronics DIAEnergie Cross-site scripting

    Improper neutralization of input within the affected product could lead to cross-site scripting.

    Delta Electronics DIAEnergie ICS / OT
  • High 8.1
    CVE-2024-25567

    Delta Electronics DIAEnergie Path traversal

    Path traversal attack is possible and write outside of the intended directory and may access sensitive information. If a file name is specified that already exists on the file system, then the original file will be overwritten.

    Delta Electronics DIAEnergie ICS / OT
  • High 8.1
    CVE-2024-28171

    Delta Electronics DIAEnergie Path traversal

    It is possible to perform a path traversal attack and write outside of the intended directory. If a file name is specified that already exists on the file system, then the original file will be overwritten.

    Delta Electronics DIAEnergie ICS / OT
  • High 8.8
    CVE-2024-23494

    Delta Electronics DIAEnergie SQL injection

    SQL injection vulnerability exists in GetDIAE_unListParameters.

    Delta Electronics DIAEnergie ICS / OT
  • High 8.8
    CVE-2024-23975

    Delta Electronics DIAEnergie SQL injection

    SQL injection vulnerability exists in GetDIAE_slogListParameters.

    Delta Electronics DIAEnergie ICS / OT
  • High 8.8
    CVE-2024-28040

    Delta Electronics DIAEnergie SQL injection

    SQL injection vulnerability exists in GetDIAE_astListParameters.

    Delta Electronics DIAEnergie ICS / OT
  • High 8.8
    CVE-2024-25937

    Delta Electronics DIAEnergie SQL injection

    SQL injection vulnerability exists in the script DIAE_tagHandler.ashx.

    Delta Electronics DIAEnergie ICS / OT
  • High 8.8
    CVE-2024-28891

    Delta Electronics DIAEnergie SQL injection

    SQL injection vulnerability exists in the script Handler_CFG.ashx.

    Delta Electronics DIAEnergie ICS / OT
  • High 8.8
    CVE-2024-28029

    Client-Side Enforcement of Server-Side Security in Delta Electronics DIAEnergie

    Privileges are not fully verified server-side, which can be abused by a user with limited privileges to bypass authorization and access privileged functionality.

    Delta Electronics DIAEnergie ICS / OT
  • High 8.8
    CVE-2023-0822

    Improper Authorization

    The affected product DIAEnergie (versions prior to v1.9.03.001) contains improper authorization, which could allow an unauthorized user to bypass authorization and access privileged functionality.

    Delta Electronics DIAEnergie ICS / OT
  • High 8.8
    CVE-2022-41775

    Delta Electronics DIAEnergie SQL Injection

    SQL Injection in Handler_CFG.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

    Delta Electronics DIAEnergie ICS / OT
  • High 8.8
    CVE-2022-43506

    Delta Electronics DIAEnergie SQL Injection

    SQL Injection in HandlerTag_KID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

    Delta Electronics DIAEnergie ICS / OT
  • High 8.8
    CVE-2022-43452

    Delta Electronics DIAEnergie SQL Injection

    SQL Injection in FtyInfoSetting.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

    Delta Electronics DIAEnergie ICS / OT
  • High 8.8
    CVE-2022-43447

    Delta Electronics DIAEnergie SQL Injection

    SQL Injection in AM_EBillAnalysis.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

    Delta Electronics DIAEnergie ICS / OT
  • High 8.8
    CVE-2022-43457

    Delta Electronics DIAEnergie SQL Injection

    SQL Injection in HandlerPage_KID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

    Delta Electronics DIAEnergie ICS / OT
  • High 8.7
    CVE-2022-41651 EPSS 11%

    Delta Electronics DIAEnergie

    The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the SetPF API.

    Delta Electronics DIAEnergie ICS / OT
  • High 8.7
    CVE-2022-41702 EPSS 11%

    Delta Electronics DIAEnergie

    The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the InsertReg API.

    Delta Electronics DIAEnergie ICS / OT
  • High 8.8
    CVE-2022-40967

    Delta Electronics DIAEnergie

    The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in CheckIoTHubNameExisted. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries.

    Delta Electronics DIAEnergie ICS / OT
  • High 8.7
    CVE-2022-41701 EPSS 11%

    Delta Electronics DIAEnergie

    The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the PutShift API.

    Delta Electronics DIAEnergie ICS / OT
  • High 8.8
    CVE-2022-41133 EPSS 27%

    Delta Electronics DIAEnergie

    The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in GetDIAE_line_message_settingsListParameters. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries.

    Delta Electronics DIAEnergie ICS / OT
  • High 8.8
    CVE-2022-41773

    Delta Electronics DIAEnergie

    The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in CheckDIACloud. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries.

    Delta Electronics DIAEnergie ICS / OT
  • High 8.7
    CVE-2022-40965 EPSS 11%

    Delta Electronics DIAEnergie

    The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the PostEnergyType API.

    Delta Electronics DIAEnergie ICS / OT
  • High 8.7
    CVE-2022-41555 EPSS 11%

    Delta Electronics DIAEnergie

    The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the PutLineMessageSetting API.

    Delta Electronics DIAEnergie ICS / OT
  • Critical 9.8
    CVE-2022-1378 EPSS 19%

    Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_…

    Delta Electronics DIAEnergie ICS / OT
  • Critical 9.8
    CVE-2022-1377

    Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_…

    Delta Electronics DIAEnergie ICS / OT
  • Critical 9.8
    CVE-2022-1376

    Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_…

    Delta Electronics DIAEnergie ICS / OT
  • Critical 9.8
    CVE-2022-1375

    Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_…

    Delta Electronics DIAEnergie ICS / OT