Description
Delta Electronics DIAEnergie (Version 1.7.5 and prior) is vulnerable to cleartext transmission as the web application runs by default on HTTP. This could allow an attacker to remotely read transmitted information between the client and product.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Delta Electronics | DIAEnergie | unspecified – ≤ 1.7.5 | — |
Advisories 1
- ICSA-21-238-03 Delta Electronics DIAEnergie (Update C) CISA ICS & IT advisories · Mar 22, 2022