Description
DIAEnergie Version 1.7.5 and prior is vulnerable to a reflected cross-site scripting attack through error pages that are returned by “.NET Request.QueryString”.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Delta Electronics | DIAEnergie | All – ≤ 1.7.5 | — |
Advisories 1
- ICSA-21-238-03 Delta Electronics DIAEnergie (Update C) CISA ICS & IT advisories · Mar 22, 2022