Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-1378 EUVD-2022-24698GHSA-96mh-3pp8-xmgq

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_pgHandler.ashx. This…

Published May 2, 2022 · Updated Apr 16, 2025 · Assigned by icscert

Vendor: Delta Electronics Product: DIAEnergie Category: ICS / OT

Description

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_pgHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

Affected products

VendorProductAffectedFixed
Delta Electronics DIAEnergie unspecified – < 1.8.02.004 1.8.02.004

Advisories 1

References