Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-1372 EUVD-2022-24692GHSA-gx3q-pcf9-9pgg

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in dlSlog.aspx. This allows …

Published May 2, 2022 · Updated Apr 16, 2025 · Assigned by icscert

Vendor: Delta Electronics Product: DIAEnergie Category: ICS / OT

Description

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in dlSlog.aspx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

Affected products

VendorProductAffectedFixed
Delta Electronics DIAEnergie unspecified – < 1.8.02.004 1.8.02.004

Advisories 1

References