Description
DIAEnergie Version 1.7.5 and prior is vulnerable to stored cross-site scripting when an unauthenticated user injects arbitrary code into the parameter “name” of the script “DIAE_HandlerAlarmGroup.ashx”.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Delta Electronics | DIAEnergie | All – ≤ 1.7.5 | — |
Advisories 1
- ICSA-21-238-03 Delta Electronics DIAEnergie (Update C) CISA ICS & IT advisories · Mar 22, 2022