Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-1367 EUVD-2022-24687GHSA-qfgj-v833-3rxg

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in Handler_TCV.ashx. This al…

Published May 2, 2022 · Updated Apr 16, 2025 · Assigned by icscert

Vendor: Delta Electronics Product: DIAEnergie Category: ICS / OT

Description

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in Handler_TCV.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

Affected products

VendorProductAffectedFixed
Delta Electronics DIAEnergie unspecified – < 1.8.02.004 1.8.02.004

Advisories 1

References