Description
DIAEnergie Version 1.7.5 and prior is vulnerable to multiple cross-site scripting vulnerabilities when arbitrary code is injected into the parameter “name” of the script “HandlerEnergyType.ashx”.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Delta Electronics | DIAEnergie | All – ≤ 1.7.5 | — |
Advisories 1
- ICSA-21-238-03 Delta Electronics DIAEnergie (Update C) CISA ICS & IT advisories · Mar 22, 2022