Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-1370 EUVD-2022-24690GHSA-qqf7-wc2r-jw3f

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadREGbyID. This allows …

Published May 2, 2022 · Updated Apr 16, 2025 · Assigned by icscert

Vendor: Delta Electronics Product: DIAEnergie Category: ICS / OT

Description

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadREGbyID. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

Affected products

VendorProductAffectedFixed
Delta Electronics DIAEnergie unspecified – < 1.8.02.004 1.8.02.004

Advisories 1

References